Dependency-Check is an open source tool performing a best effort analysis of 3rd party dependencies;
false positives and false negatives may exist in the analysis performed by the tool. Use of the tool and
the reporting provided constitutes acceptance for use in an AS IS condition, and there are NO warranties,
implied or otherwise, with regard to the analysis or its use. Any use of the tool and the reporting provided
is at the user’s risk. In no event shall the copyright holder or OWASP be held liable for any damages whatsoever
arising out of or in connection with the use of this tool, the analysis performed, or the resulting report.
Scan Information (
show all ):
dependency-check version : 10.0.3Report Generated On : Sun, 28 Jul 2024 18:43:08 GMTDependencies Scanned : 716 (526 unique)Vulnerable Dependencies : 52 Vulnerabilities Found : 341Vulnerabilities Suppressed : 0 ... NVD API Last Checked : 2024-07-28T18:42:43ZNVD API Last Modified : 2024-07-28T18:15:02ZSummary Display:
Showing Vulnerable Dependencies (click to show all) * indicates the dependency has a known exploited vulnerability
Description:
Ultimate JDBC Connection Pool License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/zaxxer/HikariCP/4.0.3/HikariCP-4.0.3.jar
MD5: e725642926105cd1bbf4ad7fdff5d5a9
SHA1: 107cbdf0db6780a065f895ae9d8fbf3bb0e1c21f
SHA256: 7c024aeff1c1063576d74453513f9de6447d8e624d17f8e27f30a2e97688c6c9
Referenced In Projects/Scopes: shardingsphere-proxy-distribution:compile shardingsphere-schedule-core:compile shardingsphere-proxy-bootstrap:runtime shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-fixture:compile shardingsphere-standalone-mode-repository-jdbc:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-proxy-native-distribution:compile shardingsphere-data-pipeline-core:compile shardingsphere-proxy-backend-core:compile HikariCP-4.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-schedule-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name HikariCP High Vendor jar package name pool Highest Vendor jar package name zaxxer Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://github.com/brettwooldridge Low Vendor Manifest bundle-symbolicname com.zaxxer.HikariCP Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor pom artifactid HikariCP Highest Vendor pom artifactid HikariCP Low Vendor pom developer email brett.wooldridge@gmail.com Low Vendor pom developer name Brett Wooldridge Medium Vendor pom groupid com.zaxxer Highest Vendor pom name HikariCP High Vendor pom organization name Zaxxer.com High Vendor pom organization url brettwooldridge Medium Vendor pom url brettwooldridge/HikariCP Highest Product file name HikariCP High Product jar package name 11 Highest Product jar package name pool Highest Product jar package name zaxxer Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://github.com/brettwooldridge Low Product Manifest Bundle-Name HikariCP Medium Product Manifest bundle-symbolicname com.zaxxer.HikariCP Medium Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product pom artifactid HikariCP Highest Product pom developer email brett.wooldridge@gmail.com Low Product pom developer name Brett Wooldridge Low Product pom groupid com.zaxxer Highest Product pom name HikariCP High Product pom organization name Zaxxer.com Low Product pom url brettwooldridge High Product pom url brettwooldridge/HikariCP High Version file version 4.0.3 High Version Manifest Bundle-Version 4.0.3 High Version pom version 4.0.3 Highest
Description:
StringTemplate is a java template engine for generating source code,
web pages, emails, or any other formatted text output.
StringTemplate is particularly good at multi-targeted code generators,
multiple site skins, and internationalization/localization.
It evolved over years of effort developing jGuru.com.
StringTemplate also powers the ANTLR 3 and 4 code generator. Its distinguishing characteristic
is that unlike other engines, it strictly enforces model-view separation.
Strict separation makes websites and code generators more flexible
and maintainable; it also provides an excellent defense against malicious
template authors.
File Path: /home/runner/.m2/repository/org/antlr/ST4/4.3/ST4-4.3.jarMD5: efd60d8dabda5630627d385d7771d460SHA1: 92f2c1ad8d84abcbeead6cf7f2c53a04166293c2SHA256: 28547dba48cfceb77b6efbfe069aebe9ed3324ae60dbd52093d13a1d636ed069Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:providedST4-4.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name ST4 High Vendor jar package name stringtemplate Highest Vendor jar package name stringtemplate Low Vendor jar package name v4 Low Vendor pom artifactid ST4 Highest Vendor pom artifactid ST4 Low Vendor pom groupid org.antlr Highest Vendor pom name StringTemplate 4 High Product file name ST4 High Product jar package name stringtemplate Highest Product jar package name v4 Low Product pom artifactid ST4 Highest Product pom groupid org.antlr Highest Product pom name StringTemplate 4 High Version file version 4.3 High Version pom version 4.3 Highest
Description:
A set of annotations used for code inspection support and code documentation. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/jetbrains/annotations/13.0/annotations-13.0.jar
MD5: f4fb462172517b46b6cd90003508515a
SHA1: 919f0dfe192fb4e063e7dacadee7f8bb9a2672a9
SHA256: ace2a10dc8e2d5fd34925ecac03e4988b2c0f851650c94b8cef49ba1bd111478
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-engine:compile shardingsphere-agent-tracing-opentelemetry:compile shardingsphere-agent-distribution:compile annotations-13.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.10 pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.10 Evidence Type Source Name Value Confidence Vendor file name annotations High Vendor jar package name annotations Highest Vendor jar package name annotations Low Vendor jar package name intellij Highest Vendor jar package name intellij Low Vendor jar package name jetbrains Highest Vendor jar package name lang Low Vendor pom artifactid annotations Highest Vendor pom artifactid annotations Low Vendor pom developer id JetBrains Medium Vendor pom developer name JetBrains Team Medium Vendor pom developer org JetBrains Medium Vendor pom developer org URL http://www.jetbrains.com Medium Vendor pom groupid org.jetbrains Highest Vendor pom name IntelliJ IDEA Annotations High Vendor pom url http://www.jetbrains.org Highest Product file name annotations High Product jar package name annotations Highest Product jar package name annotations Low Product jar package name intellij Highest Product jar package name jetbrains Highest Product jar package name lang Low Product pom artifactid annotations Highest Product pom developer id JetBrains Low Product pom developer name JetBrains Team Low Product pom developer org JetBrains Low Product pom developer org URL http://www.jetbrains.com Low Product pom groupid org.jetbrains Highest Product pom name IntelliJ IDEA Annotations High Product pom url http://www.jetbrains.org Medium Version file version 13.0 High Version pom version 13.0 Highest
Description:
A set of annotations used for code inspection support and code documentation. License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/jetbrains/annotations/17.0.0/annotations-17.0.0.jar
MD5: 7b06437ed47fa7b4a8ec8909f4fb9022
SHA1: 8ceead41f4e71821919dbdb7a9847608f1a938cb
SHA256: 195fb0da046d55bb042e91543484cf1da68b02bb7afbfe031f229e45ac84b3f2
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile annotations-17.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.testcontainers/testcontainers@1.20.0 pkg:maven/org.testcontainers/testcontainers@1.20.0 pkg:maven/org.testcontainers/testcontainers@1.20.0 pkg:maven/org.testcontainers/testcontainers@1.20.0 Evidence Type Source Name Value Confidence Vendor file name annotations High Vendor jar package name annotations Highest Vendor jar package name jetbrains Highest Vendor Manifest automatic-module-name org.jetbrains.annotations Medium Vendor pom artifactid annotations Highest Vendor pom artifactid annotations Low Vendor pom developer id JetBrains Medium Vendor pom developer name JetBrains Team Medium Vendor pom developer org JetBrains Medium Vendor pom developer org URL https://www.jetbrains.com Medium Vendor pom groupid org.jetbrains Highest Vendor pom name JetBrains Java Annotations High Vendor pom url JetBrains/java-annotations Highest Product file name annotations High Product jar package name annotations Highest Product jar package name jetbrains Highest Product Manifest automatic-module-name org.jetbrains.annotations Medium Product pom artifactid annotations Highest Product pom developer id JetBrains Low Product pom developer name JetBrains Team Low Product pom developer org JetBrains Low Product pom developer org URL https://www.jetbrains.com Low Product pom groupid org.jetbrains Highest Product pom name JetBrains Java Annotations High Product pom url JetBrains/java-annotations High Version file version 17.0.0 High Version pom version 17.0.0 Highest
Description:
A framework for constructing recognizers, compilers, and translators from grammatical descriptions containing Java, C#, C++, or Python actions. File Path: /home/runner/.m2/repository/org/antlr/antlr-runtime/3.5.2/antlr-runtime-3.5.2.jarMD5: 1fbbae2cb72530207c20b797bdabd029SHA1: cd9cd41361c155f3af0f653009dcecb08d8b4afdSHA256: ce3fc8ecb10f39e9a3cddcbb2ce350d272d9cd3d0b1e18e6fe73c3b9389c8734Referenced In Projects/Scopes:
shardingsphere-infra-database-hive:provided shardingsphere-transaction-base-seata-at:provided antlr-runtime-3.5.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0 pkg:maven/org.apache.hive/hive-jdbc@3.1.3 Evidence Type Source Name Value Confidence Vendor file name antlr-runtime High Vendor jar package name antlr Highest Vendor jar package name runtime Highest Vendor Manifest Implementation-Vendor ANTLR High Vendor Manifest Implementation-Vendor-Id org.antlr Medium Vendor pom artifactid antlr-runtime Highest Vendor pom artifactid antlr-runtime Low Vendor pom developer email jimi@temporal-wave.com Low Vendor pom developer email parrt@antlr.org Low Vendor pom developer name Jim Idle Medium Vendor pom developer name Terence Parr Medium Vendor pom developer org Temporal Wave LLC Medium Vendor pom developer org USFCA Medium Vendor pom developer org URL http://www.cs.usfca.edu Medium Vendor pom developer org URL http://www.temporal-wave.com Medium Vendor pom groupid org.antlr Highest Vendor pom name ANTLR 3 Runtime High Vendor pom parent-artifactid antlr-master Low Vendor pom url http://www.antlr.org Highest Product file name antlr-runtime High Product jar package name antlr Highest Product jar package name runtime Highest Product Manifest Implementation-Title ANTLR 3 Runtime High Product pom artifactid antlr-runtime Highest Product pom developer email jimi@temporal-wave.com Low Product pom developer email parrt@antlr.org Low Product pom developer name Jim Idle Low Product pom developer name Terence Parr Low Product pom developer org Temporal Wave LLC Low Product pom developer org USFCA Low Product pom developer org URL http://www.cs.usfca.edu Low Product pom developer org URL http://www.temporal-wave.com Low Product pom groupid org.antlr Highest Product pom name ANTLR 3 Runtime High Product pom parent-artifactid antlr-master Medium Product pom url http://www.antlr.org Medium Version file version 3.5.2 High Version Manifest Implementation-Version 3.5.2 High Version pom version 3.5.2 Highest
Description:
The ANTLR 4 grammar compiler. File Path: /home/runner/.m2/repository/org/antlr/antlr4/4.8/antlr4-4.8.jarMD5: a374dbfb589aaf09abebfe017f2f807aSHA1: c5902f3079595a5e73dd6b008340a8197ee1aedaSHA256: 6e4477689371f237d4d8aa40642badbb209d4628ccdd81234d90f829a743bac8Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:providedantlr4-4.8.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name antlr4 High Vendor jar package name antlr Highest Vendor jar package name grammar Highest Vendor jar package name tool Highest Vendor Manifest implementation-url http://www.antlr.org Low Vendor Manifest Implementation-Vendor ANTLR High Vendor Manifest Implementation-Vendor-Id org.antlr Medium Vendor pom artifactid antlr4 Highest Vendor pom artifactid antlr4 Low Vendor pom groupid org.antlr Highest Vendor pom name ANTLR 4 Tool High Vendor pom parent-artifactid antlr4-master Low Vendor pom url http://www.antlr.org Highest Product file name antlr4 High Product jar package name antlr Highest Product jar package name grammar Highest Product jar package name tool Highest Product Manifest Implementation-Title ANTLR 4 Tool High Product Manifest implementation-url http://www.antlr.org Low Product pom artifactid antlr4 Highest Product pom groupid org.antlr Highest Product pom name ANTLR 4 Tool High Product pom parent-artifactid antlr4-master Medium Product pom url http://www.antlr.org Medium Version file version 4.8 High Version Manifest Implementation-Version 4.8 High Version pom version 4.8 Highest
Description:
AOP Alliance License:
Public Domain File Path: /home/runner/.m2/repository/aopalliance/aopalliance/1.0/aopalliance-1.0.jar
MD5: 04177054e180d09e3998808efa0401c7
SHA1: 0235ba8b489512805ac13a8f9ea77a1ca5ebe3e8
SHA256: 0addec670fedcd3f113c5c8091d783280d23f75e3acb841b61a9cdb079376a08
Referenced In Projects/Scopes: shardingsphere-infra-database-hive:provided shardingsphere-transaction-base-seata-at:provided aopalliance-1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0 pkg:maven/org.apache.hive/hive-jdbc@3.1.3 Evidence Type Source Name Value Confidence Vendor file name aopalliance High Vendor jar package name aop Highest Vendor jar package name aopalliance Highest Vendor jar package name aopalliance Low Vendor jar package name intercept Low Vendor pom artifactid aopalliance Highest Vendor pom artifactid aopalliance Low Vendor pom groupid aopalliance Highest Vendor pom name AOP alliance High Vendor pom url http://aopalliance.sourceforge.net Highest Product file name aopalliance High Product jar package name aop Highest Product jar package name aopalliance Highest Product jar package name intercept Low Product pom artifactid aopalliance Highest Product pom groupid aopalliance Highest Product pom name AOP alliance High Product pom url http://aopalliance.sourceforge.net Medium Version file version 1.0 High Version pom version 1.0 Highest
Description:
Dependency Injection Kernel License:
https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/org/glassfish/hk2/external/aopalliance-repackaged/2.5.0-b32/aopalliance-repackaged-2.5.0-b32.jar
MD5: 99809f55109881865ce8b47f03522fb6
SHA1: 6af37c3f8ec6f9e9653ec837eb508da28ce443cd
SHA256: 32a44ed0258c00bb8f0acf7e4dbf000a377bd48702465f6195f878a6dc2024d6
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
aopalliance-repackaged-2.5.0-b32.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name aopalliance-repackaged High Vendor jar package name aopalliance Highest Vendor Manifest bundle-docurl http://www.oracle.com Low Vendor Manifest bundle-symbolicname org.glassfish.hk2.external.aopalliance-repackaged Medium Vendor pom artifactid aopalliance-repackaged Highest Vendor pom artifactid aopalliance-repackaged Low Vendor pom groupid org.glassfish.hk2.external Highest Vendor pom name aopalliance version repackaged as a module High Vendor pom name aopalliance version ${aopalliance.version} repackaged as a module High Vendor pom parent-artifactid external Low Vendor pom parent-groupid org.glassfish.hk2 Medium Product file name aopalliance-repackaged High Product jar package name aopalliance Highest Product Manifest bundle-docurl http://www.oracle.com Low Product Manifest Bundle-Name aopalliance version 1.0 repackaged as a module Medium Product Manifest bundle-symbolicname org.glassfish.hk2.external.aopalliance-repackaged Medium Product pom artifactid aopalliance-repackaged Highest Product pom groupid org.glassfish.hk2.external Highest Product pom name aopalliance version repackaged as a module High Product pom name aopalliance version ${aopalliance.version} repackaged as a module High Product pom parent-artifactid external Medium Product pom parent-groupid org.glassfish.hk2 Medium Version pom version 2.5.0-b32 Highest
Description:
Curator is a set of Java libraries that make using Apache ZooKeeper much easier.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/curator/apache-curator/2.12.0/apache-curator-2.12.0.pom
MD5: afc27d6742f38613eb3053f826a8dd9f
SHA1: 0b1ff6ce0741facb15217ae9254ee7167bc7b15e
SHA256: be25c26d122093bcc625b4cfdfc017583814bd7640c0758de1a5c5de4b0c4919
apache-curator-2.12.0.pom is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name apache-curator High Vendor pom artifactid apache-curator Low Vendor pom developer email cammckenzie@apache.org Low Vendor pom developer email cheddar@apache.org Low Vendor pom developer email dragonsinth@apache.org Low Vendor pom developer email enis@apache.org Low Vendor pom developer email iocanel@apache.org Low Vendor pom developer email lresende@apache.org Low Vendor pom developer email mahadev@apache.org Low Vendor pom developer email mdrob@apache.org Low Vendor pom developer email phunt1@gmail.com Low Vendor pom developer email randgalt@apache.org Low Vendor pom developer email zarfide@apache.org Low Vendor pom developer id cammckenzie Medium Vendor pom developer id cheddar Medium Vendor pom developer id dragonsinth Medium Vendor pom developer id iocanel Medium Vendor pom developer id mdrob Medium Vendor pom developer id randgalt Medium Vendor pom developer id zarfide Medium Vendor pom developer name Cameron McKenzie Medium Vendor pom developer name Enis Söztutar Medium Vendor pom developer name Eric Tschetter Medium Vendor pom developer name Ioannis Canellos Medium Vendor pom developer name Jay Zarfoss Medium Vendor pom developer name Jordan Zimmerman Medium Vendor pom developer name Luciano Resende Medium Vendor pom developer name Mahadev Konar Medium Vendor pom developer name Mike Drob Medium Vendor pom developer name Patrick Hunt Medium Vendor pom developer name Scott Blum Medium Vendor pom groupid org.apache.curator Highest Vendor pom name Apache Curator High Vendor pom organization name The Apache Software Foundation High Vendor pom organization url http://www.apache.org/ Medium Vendor pom parent-artifactid apache Low Vendor pom parent-groupid org.apache Medium Vendor pom url http://curator.apache.org Highest Product file name apache-curator High Product pom artifactid apache-curator Highest Product pom developer email cammckenzie@apache.org Low Product pom developer email cheddar@apache.org Low Product pom developer email dragonsinth@apache.org Low Product pom developer email enis@apache.org Low Product pom developer email iocanel@apache.org Low Product pom developer email lresende@apache.org Low Product pom developer email mahadev@apache.org Low Product pom developer email mdrob@apache.org Low Product pom developer email phunt1@gmail.com Low Product pom developer email randgalt@apache.org Low Product pom developer email zarfide@apache.org Low Product pom developer id cammckenzie Low Product pom developer id cheddar Low Product pom developer id dragonsinth Low Product pom developer id iocanel Low Product pom developer id mdrob Low Product pom developer id randgalt Low Product pom developer id zarfide Low Product pom developer name Cameron McKenzie Low Product pom developer name Enis Söztutar Low Product pom developer name Eric Tschetter Low Product pom developer name Ioannis Canellos Low Product pom developer name Jay Zarfoss Low Product pom developer name Jordan Zimmerman Low Product pom developer name Luciano Resende Low Product pom developer name Mahadev Konar Low Product pom developer name Mike Drob Low Product pom developer name Patrick Hunt Low Product pom developer name Scott Blum Low Product pom groupid org.apache.curator Highest Product pom name Apache Curator High Product pom organization name The Apache Software Foundation Low Product pom organization url http://www.apache.org/ Low Product pom parent-artifactid apache Medium Product pom parent-groupid org.apache Medium Product pom url http://curator.apache.org Medium Version file version 2.12.0 High Version pom parent-version 2.12.0 Low Version pom version 2.12.0 Highest
Description:
Jetty-specific ServletContainerInitializer for Jasper License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/jetty/apache-jsp/9.3.20.v20170531/apache-jsp-9.3.20.v20170531.jar
MD5: f2fbbd854f5e212b0ccd601a8a8df808
SHA1: dc1b4b9e4b9bd756f25eeba8c8de4b10942ce79f
SHA256: 4d67c749aeafb7096d8e2d84f575743eb2757b54ea8fbb911c8c2bfc71b48d5f
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
apache-jsp-9.3.20.v20170531.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name apache-jsp High Vendor jar package name apache Highest Vendor jar package name eclipse Highest Vendor jar package name jetty Highest Vendor jar package name jsp Highest Vendor Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.apache-jsp Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor Manifest provide-capability osgi.serviceloader;osgi.serviceloader="javax.servlet.ServletContainerInitializer" Low Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom artifactid apache-jsp Highest Vendor pom artifactid apache-jsp Low Vendor pom groupid org.eclipse.jetty Highest Vendor pom name Jetty :: Apache JSP Implementation High Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product file name apache-jsp High Product jar package name apache Highest Product jar package name eclipse Highest Product jar package name jetty Highest Product jar package name jsp Highest Product Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest Bundle-Name Jetty :: Apache JSP Implementation Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname org.eclipse.jetty.apache-jsp Medium Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product Manifest provide-capability osgi.serviceloader;osgi.serviceloader="javax.servlet.ServletContainerInitializer" Low Product Manifest url http://www.eclipse.org/jetty Low Product pom artifactid apache-jsp Highest Product pom groupid org.eclipse.jetty Highest Product pom name Jetty :: Apache JSP Implementation High Product pom parent-artifactid jetty-project Medium Product pom url http://www.eclipse.org/jetty Medium Version file version 9.3.20.v20170531 High Version Manifest Bundle-Version 9.3.20.v20170531 High Version Manifest Implementation-Version 9.3.20.v20170531 High Version pom version 9.3.20.v20170531 Highest
CVE-2017-7657 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), CWE-190 Integer Overflow or Wraparound
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7656 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12545 suppress
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings. CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28165 suppress
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. CWE-400 Uncontrolled Resource Consumption, CWE-755 Improper Handling of Exceptional Conditions, CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVSSv2:
Base Score: HIGH (7.8) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:C CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2048 suppress
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. CWE-664 Improper Control of a Resource Through its Lifetime, NVD-CWE-Other, CWE-410 Insufficient Resource Pool
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36478 suppress
Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to
exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295
will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds. CWE-400 Uncontrolled Resource Consumption, CWE-190 Integer Overflow or Wraparound
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2020-27216 suppress
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (4.4) Vector: /AV:L/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.0/RC:R/MAV:A References:
emo@eclipse.org - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY emo@eclipse.org - EXPLOIT,PATCH,VENDOR_ADVISORY emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY emo@eclipse.org - NOT_APPLICABLE,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2019-10241 suppress
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12536 suppress
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system. CWE-209 Generation of Error Message Containing Sensitive Information, NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-10247 suppress
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context. CWE-213 Exposure of Sensitive Information Due to Incompatible Policies, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28169 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application. NVD-CWE-Other, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26048 suppress
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory). CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26049 suppress
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue. NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-40167 suppress
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario. CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36479 suppress
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.
CWE-149 Improper Neutralization of Quoting Syntax
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-34428 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in. CWE-613 Insufficient Session Expiration
CVSSv2:
Base Score: LOW (3.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: LOW (3.5) Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:0.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2047 suppress
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:P/A:N CVSSv3:
Base Score: LOW (2.7) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:1.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Jetty module for Apache :: JSTL module License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/jetty/apache-jstl/9.3.20.v20170531/apache-jstl-9.3.20.v20170531.jar
MD5: b36ea2d4dfdb0617a56fd494b1fa1653
SHA1: d754d019896247a7c1309554a30faa66ce9f4336
SHA256: 6bb660d98555ed44b6710af7ca179bc6328fadfaca17b054d9eafe8276bb9c1b
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
apache-jstl-9.3.20.v20170531.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name apache-jstl High Vendor Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.apache.jstl Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom artifactid apache-jstl Highest Vendor pom artifactid apache-jstl Low Vendor pom groupid org.eclipse.jetty Highest Vendor pom name Apache :: JSTL module High Vendor pom parent-artifactid jetty-project Low Vendor pom url http://tomcat.apache.org/taglibs/standard/ Highest Product file name apache-jstl High Product Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest Bundle-Name Apache :: JSTL module Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname org.eclipse.jetty.apache.jstl Medium Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product Manifest url http://www.eclipse.org/jetty Low Product pom artifactid apache-jstl Highest Product pom groupid org.eclipse.jetty Highest Product pom name Apache :: JSTL module High Product pom parent-artifactid jetty-project Medium Product pom url http://tomcat.apache.org/taglibs/standard/ Medium Version file version 9.3.20.v20170531 High Version Manifest Bundle-Version 9.3.20.v20170531 High Version Manifest Implementation-Version 9.3.20.v20170531 High Version pom version 9.3.20.v20170531 Highest
CVE-2017-7657 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), CWE-190 Integer Overflow or Wraparound
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7656 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12545 suppress
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings. CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28165 suppress
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. CWE-400 Uncontrolled Resource Consumption, CWE-755 Improper Handling of Exceptional Conditions, CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVSSv2:
Base Score: HIGH (7.8) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:C CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2048 suppress
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. CWE-664 Improper Control of a Resource Through its Lifetime, NVD-CWE-Other, CWE-410 Insufficient Resource Pool
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36478 suppress
Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to
exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295
will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds. CWE-400 Uncontrolled Resource Consumption, CWE-190 Integer Overflow or Wraparound
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2020-27216 suppress
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (4.4) Vector: /AV:L/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.0/RC:R/MAV:A References:
emo@eclipse.org - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY emo@eclipse.org - EXPLOIT,PATCH,VENDOR_ADVISORY emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY emo@eclipse.org - NOT_APPLICABLE,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2019-10241 suppress
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12536 suppress
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system. CWE-209 Generation of Error Message Containing Sensitive Information, NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-10247 suppress
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context. CWE-213 Exposure of Sensitive Information Due to Incompatible Policies, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28169 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application. NVD-CWE-Other, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26048 suppress
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory). CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26049 suppress
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue. NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-40167 suppress
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario. CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36479 suppress
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.
CWE-149 Improper Neutralization of Quoting Syntax
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-34428 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in. CWE-613 Insufficient Session Expiration
CVSSv2:
Base Score: LOW (3.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: LOW (3.5) Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:0.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2047 suppress
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:P/A:N CVSSv3:
Base Score: LOW (2.7) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:1.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Narayana: ArjunaCore Arjuna File Path: /home/runner/.m2/repository/org/jboss/narayana/arjunacore/arjuna/5.12.7.Final/arjuna-5.12.7.Final.jarMD5: 6afb2f988fc993b14be862983032d84aSHA1: d4ff5f6f6864ffaf22ec5e68a60436854798c2f9SHA256: 1f3cec6f61ae44e428d3be694bcc087a25bbec202d8b96c271b633d33bbb6d98Referenced In Projects/Scopes:
shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-transaction-xa-narayana:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile arjuna-5.12.7.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.jboss.narayana.jta/jta@5.12.7.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.jboss.narayana.jta/jta@5.12.7.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.jboss.narayana.jta/jta@5.12.7.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name arjuna High Vendor jar package name arjuna Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest implementation-url http://www.jboss.org/ Low Vendor Manifest Implementation-Vendor JBoss by Red Hat, Inc. High Vendor Manifest Implementation-Vendor-Id http://www.jboss.org/ Medium Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor Manifest specification-vendor JBoss by Red Hat Low Vendor pom artifactid arjuna Highest Vendor pom artifactid arjuna Low Vendor pom groupid org.jboss.narayana.arjunacore Highest Vendor pom name Narayana: ArjunaCore arjuna High Vendor pom parent-artifactid arjunacore-all Low Product file name arjuna High Product jar package name arjuna Highest Product Manifest build-jdk-spec 11 Low Product Manifest Implementation-Title Narayana: ArjunaCore arjuna High Product Manifest implementation-url http://www.jboss.org/ Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title Narayana: ArjunaCore arjuna Medium Product pom artifactid arjuna Highest Product pom groupid org.jboss.narayana.arjunacore Highest Product pom name Narayana: ArjunaCore arjuna High Product pom parent-artifactid arjunacore-all Medium Version Manifest Implementation-Version 5.12.7.Final High Version pom version 5.12.7.Final Highest
File Path: /home/runner/.m2/repository/org/ow2/asm/asm-commons/5.0.1/asm-commons-5.0.1.jarMD5: 6b6ec238db815d6041bd1cea62eacc06SHA1: 7b7147a390a93a14d2edfdcf3f7b0e87a0939c3eSHA256: fb1cb7fa27d892712ced8fbf8d027eb5052ecd3999dba1ba47824357accb40e7Referenced In Project/Scope: shardingsphere-infra-database-hive:providedasm-commons-5.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name asm-commons High Vendor jar package name asm Highest Vendor jar package name commons Highest Vendor jar package name objectweb Highest Vendor Manifest bundle-docurl http://asm.objectweb.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.3 Low Vendor Manifest bundle-symbolicname org.objectweb.asm.commons Medium Vendor Manifest Implementation-Vendor France Telecom R&D High Vendor pom artifactid asm-commons Highest Vendor pom artifactid asm-commons Low Vendor pom groupid org.ow2.asm Highest Vendor pom name ASM Commons High Vendor pom parent-artifactid asm-parent Low Product file name asm-commons High Product jar package name asm Highest Product jar package name commons Highest Product jar package name objectweb Highest Product Manifest bundle-docurl http://asm.objectweb.org Low Product Manifest Bundle-Name ASM commons classes Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.3 Low Product Manifest bundle-symbolicname org.objectweb.asm.commons Medium Product Manifest Implementation-Title ASM commons classes High Product pom artifactid asm-commons Highest Product pom groupid org.ow2.asm Highest Product pom name ASM Commons High Product pom parent-artifactid asm-parent Medium Version file version 5.0.1 High Version Manifest Bundle-Version 5.0.1 High Version Manifest Implementation-Version 5.0.1 High Version pom version 5.0.1 Highest
File Path: /home/runner/.m2/repository/org/ow2/asm/asm-tree/5.0.1/asm-tree-5.0.1.jarMD5: 5924c798a4e14d0192f1a6f33f726c2cSHA1: 1b1e6e9d869acd704056d0a4223071a511c619e6SHA256: ff2aceed10da9930a44f6c8f81c6372d5e55eb59c4e0ea9d37f77dfd765fa9faReferenced In Project/Scope: shardingsphere-infra-database-hive:providedasm-tree-5.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name asm-tree High Vendor jar package name asm Highest Vendor jar package name objectweb Highest Vendor jar package name tree Highest Vendor Manifest bundle-docurl http://asm.objectweb.org Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.3 Low Vendor Manifest bundle-symbolicname org.objectweb.asm.tree Medium Vendor Manifest Implementation-Vendor France Telecom R&D High Vendor pom artifactid asm-tree Highest Vendor pom artifactid asm-tree Low Vendor pom groupid org.ow2.asm Highest Vendor pom name ASM Tree High Vendor pom parent-artifactid asm-parent Low Product file name asm-tree High Product jar package name asm Highest Product jar package name objectweb Highest Product jar package name tree Highest Product Manifest bundle-docurl http://asm.objectweb.org Low Product Manifest Bundle-Name ASM Tree class visitor Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.3 Low Product Manifest bundle-symbolicname org.objectweb.asm.tree Medium Product Manifest Implementation-Title ASM Tree class visitor High Product pom artifactid asm-tree Highest Product pom groupid org.ow2.asm Highest Product pom name ASM Tree High Product pom parent-artifactid asm-parent Medium Version file version 5.0.1 High Version Manifest Bundle-Version 5.0.1 High Version Manifest Implementation-Version 5.0.1 High Version pom version 5.0.1 Highest
File Path: /home/runner/.m2/repository/com/atomikos/atomikos-util/6.0.0/atomikos-util-6.0.0.jarMD5: 555f508cae8ff9e096dfda46ba511c41SHA1: dafeb49d4b1e86ef060a0e272ef922558ae24340SHA256: d70cdbeb3fc6d3fab10dc06371b371a0c8c5f7216c6bc51e92817251567c68b2Referenced In Projects/Scopes:
shardingsphere-proxy-backend-opengauss:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-transaction-xa-atomikos:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-transaction-xa-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile atomikos-util-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/com.atomikos/transactions@6.0.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/com.atomikos/transactions@6.0.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name atomikos-util High Vendor jar package name atomikos Highest Vendor jar package name atomikos Low Vendor jar package name util Highest Vendor pom artifactid atomikos-util Highest Vendor pom artifactid atomikos-util Low Vendor pom groupid com.atomikos Highest Vendor pom name Atomikos Util High Vendor pom parent-artifactid ate Low Product file name atomikos-util High Product jar package name atomikos Highest Product jar package name util Highest Product pom artifactid atomikos-util Highest Product pom groupid com.atomikos Highest Product pom name Atomikos Util High Product pom parent-artifactid ate Medium Version file version 6.0.0 High Version pom version 6.0.0 Highest
Description:
Annotations for defining API boundaries and tools for managing javadocs File Path: /home/runner/.m2/repository/org/apache/yetus/audience-annotations/0.12.0/audience-annotations-0.12.0.jarMD5: 76ba71bbe18c4724d96bec68bbe12ff1SHA1: e0efa60318229590103e31c69ebdaae56d903644SHA256: ffb101fc066360ff3c77457c927fd7967fb096a6ee9e046ab7071447d8208efcReferenced In Projects/Scopes:
shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile audience-annotations-0.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-test@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-client@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name audience-annotations High Vendor jar package name apache Highest Vendor jar package name audience Highest Vendor jar package name tools Highest Vendor jar package name yetus Highest Vendor Manifest implementation-url https://yetus.apache.org/audience-annotations Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.yetus Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid audience-annotations Highest Vendor pom artifactid audience-annotations Low Vendor pom groupid org.apache.yetus Highest Vendor pom name Apache Yetus - Audience Annotations High Vendor pom parent-artifactid yetus-project Low Product file name audience-annotations High Product jar package name apache Highest Product jar package name audience Highest Product jar package name tools Highest Product jar package name yetus Highest Product Manifest Implementation-Title Apache Yetus - Audience Annotations High Product Manifest implementation-url https://yetus.apache.org/audience-annotations Low Product Manifest specification-title Apache Yetus - Audience Annotations Medium Product pom artifactid audience-annotations Highest Product pom groupid org.apache.yetus Highest Product pom name Apache Yetus - Audience Annotations High Product pom parent-artifactid yetus-project Medium Version file version 0.12.0 High Version Manifest Implementation-Version 0.12.0 High Version pom version 0.12.0 Highest
Description:
Avro core components License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/avro/avro/1.7.7/avro-1.7.7.jar
MD5: e910e3a3bad0181b1e2e55856cf3ce83
SHA1: 3548c0bc136e71006f3fc34e22d34a29e5069e50
SHA256: 5ba0a81f4b0769122b6045b98bb9bbba5f2c69dbf736a6cc7ca4eb603c337487
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
avro-1.7.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name avro High Vendor jar package name apache Highest Vendor jar package name avro Highest Vendor Manifest bundle-docurl http://www.apache.org/ Low Vendor Manifest bundle-symbolicname avro Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.avro Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid avro Highest Vendor pom artifactid avro Low Vendor pom groupid org.apache.avro Highest Vendor pom name Apache Avro High Vendor pom parent-artifactid avro-parent Low Vendor pom url http://avro.apache.org Highest Product file name avro High Product jar package name apache Highest Product jar package name avro Highest Product Manifest bundle-docurl http://www.apache.org/ Low Product Manifest Bundle-Name Apache Avro Medium Product Manifest bundle-symbolicname avro Medium Product Manifest Implementation-Title Apache Avro High Product Manifest specification-title Apache Avro Medium Product pom artifactid avro Highest Product pom groupid org.apache.avro Highest Product pom name Apache Avro High Product pom parent-artifactid avro-parent Medium Product pom url http://avro.apache.org Medium Version file version 1.7.7 High Version Manifest Bundle-Version 1.7.7 High Version Manifest Implementation-Version 1.7.7 High Version pom version 1.7.7 Highest
CVE-2023-39410 (OSSINDEX)suppress
When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system.
This issue affects Java applications using Apache Avro Java SDK up to and including 1.11.2. Users should update to apache-avro version 1.11.3 which addresses this issue.
CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.apache.avro:avro:1.7.7:*:*:*:*:*:*:* Description:
The Bouncy Castle Java APIs for CMS, PKCS, EAC, TSP, CMP, CRMF, OCSP, and certificate generation. This jar contains APIs for JDK 1.8 and up. The APIs can be used in conjunction with a JCE/JCA provider such as the one provided with the Bouncy Castle Cryptography APIs. License:
Bouncy Castle Licence: https://www.bouncycastle.org/licence.html File Path: /home/runner/.m2/repository/org/bouncycastle/bcpkix-jdk18on/1.78.1/bcpkix-jdk18on-1.78.1.jar
MD5: bbe33d493826742ce3cda5fe5181b668
SHA1: 17b3541f736df97465f87d9f5b5dfa4991b37bb3
SHA256: 4b48ea084e5232b9d79ebca1887b9de037b124931807cd60710748c2aee08cc9
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-pipeline:compile bcpkix-jdk18on-1.78.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name bcpkix-jdk18on High Vendor jar package name bouncycastle Highest Vendor jar package name cmp Highest Vendor jar package name cms Highest Vendor jar package name crmf Highest Vendor jar package name eac Highest Vendor jar package name ocsp Highest Vendor jar package name pkcs Highest Vendor jar package name pkix Highest Vendor jar package name tsp Highest Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname bcpkix Medium Vendor Manifest multi-release true Low Vendor pom artifactid bcpkix-jdk18on Highest Vendor pom artifactid bcpkix-jdk18on Low Vendor pom developer email feedback-crypto@bouncycastle.org Low Vendor pom developer id feedback-crypto Medium Vendor pom developer name The Legion of the Bouncy Castle Inc. Medium Vendor pom groupid org.bouncycastle Highest Vendor pom name Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs High Vendor pom url https://www.bouncycastle.org/java.html Highest Product file name bcpkix-jdk18on High Product jar package name bouncycastle Highest Product jar package name cmp Highest Product jar package name cms Highest Product jar package name crmf Highest Product jar package name eac Highest Product jar package name ocsp Highest Product jar package name pkcs Highest Product jar package name pkix Highest Product jar package name tsp Highest Product Manifest Bundle-Name bcpkix Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname bcpkix Medium Product Manifest multi-release true Low Product pom artifactid bcpkix-jdk18on Highest Product pom developer email feedback-crypto@bouncycastle.org Low Product pom developer id feedback-crypto Low Product pom developer name The Legion of the Bouncy Castle Inc. Low Product pom groupid org.bouncycastle Highest Product pom name Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs High Product pom url https://www.bouncycastle.org/java.html Medium Version file version 1.78.1 High Version Manifest Bundle-Version 1.78.1 High Version pom version 1.78.1 Highest
Description:
The Bouncy Castle Crypto package is a Java implementation of cryptographic algorithms. This jar contains JCE provider and lightweight API for the Bouncy Castle Cryptography APIs for JDK 1.8 and up. License:
Bouncy Castle Licence: https://www.bouncycastle.org/licence.html File Path: /home/runner/.m2/repository/org/bouncycastle/bcprov-jdk18on/1.78.1/bcprov-jdk18on-1.78.1.jar
MD5: 9646d6d9c087fd408fafe0e3cfe56c25
SHA1: 39e9e45359e20998eb79c1828751f94a818d25f8
SHA256: add5915e6acfc6ab5836e1fd8a5e21c6488536a8c1f21f386eeb3bf280b702d7
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-pipeline:compile bcprov-jdk18on-1.78.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name bcprov-jdk18on High Vendor jar package name bouncycastle Highest Vendor jar package name crypto Highest Vendor jar package name jce Highest Vendor jar package name org Highest Vendor jar package name provider Highest Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname bcprov Medium Vendor Manifest multi-release true Low Vendor pom artifactid bcprov-jdk18on Highest Vendor pom artifactid bcprov-jdk18on Low Vendor pom developer email feedback-crypto@bouncycastle.org Low Vendor pom developer id feedback-crypto Medium Vendor pom developer name The Legion of the Bouncy Castle Inc. Medium Vendor pom groupid org.bouncycastle Highest Vendor pom name Bouncy Castle Provider High Vendor pom url https://www.bouncycastle.org/java.html Highest Product file name bcprov-jdk18on High Product jar package name bouncycastle Highest Product jar package name crypto Highest Product jar package name jce Highest Product jar package name org Highest Product jar package name provider Highest Product Manifest Bundle-Name bcprov Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname bcprov Medium Product Manifest multi-release true Low Product pom artifactid bcprov-jdk18on Highest Product pom developer email feedback-crypto@bouncycastle.org Low Product pom developer id feedback-crypto Low Product pom developer name The Legion of the Bouncy Castle Inc. Low Product pom groupid org.bouncycastle Highest Product pom name Bouncy Castle Provider High Product pom url https://www.bouncycastle.org/java.html Medium Version file version 1.78.1 High Version Manifest Bundle-Version 1.78.1 High Version pom version 1.78.1 Highest
Description:
The Bouncy Castle Java APIs for TLS and DTLS, including a provider for the JSSE. License:
Bouncy Castle Licence: https://www.bouncycastle.org/licence.html File Path: /home/runner/.m2/repository/org/bouncycastle/bctls-jdk18on/1.78.1/bctls-jdk18on-1.78.1.jar
MD5: 82a0526b15534997e6de21431050c5d4
SHA1: d15b33dde190c21124fbde8dd712defe22bb8bfe
SHA256: 483bd1582d3957adfe100747f22c6da0ff9532d6464f9c454181f99bfa44e52b
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-pipeline:compile bctls-jdk18on-1.78.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name bctls-jdk18on High Vendor jar package name bouncycastle Highest Vendor jar package name java Highest Vendor jar package name jsse Highest Vendor jar package name org Highest Vendor jar package name provider Highest Vendor jar package name tls Highest Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname bctls Medium Vendor Manifest multi-release true Low Vendor pom artifactid bctls-jdk18on Highest Vendor pom artifactid bctls-jdk18on Low Vendor pom developer email feedback-crypto@bouncycastle.org Low Vendor pom developer id feedback-crypto Medium Vendor pom developer name The Legion of the Bouncy Castle Inc. Medium Vendor pom groupid org.bouncycastle Highest Vendor pom name Bouncy Castle JSSE provider and TLS/DTLS API High Vendor pom url https://www.bouncycastle.org/java.html Highest Product file name bctls-jdk18on High Product jar package name bouncycastle Highest Product jar package name java Highest Product jar package name jsse Highest Product jar package name org Highest Product jar package name provider Highest Product jar package name tls Highest Product Manifest Bundle-Name bctls Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname bctls Medium Product Manifest multi-release true Low Product pom artifactid bctls-jdk18on Highest Product pom developer email feedback-crypto@bouncycastle.org Low Product pom developer id feedback-crypto Low Product pom developer name The Legion of the Bouncy Castle Inc. Low Product pom groupid org.bouncycastle Highest Product pom name Bouncy Castle JSSE provider and TLS/DTLS API High Product pom url https://www.bouncycastle.org/java.html Medium Version file version 1.78.1 High Version Manifest Bundle-Version 1.78.1 High Version pom version 1.78.1 Highest
Description:
The Bouncy Castle Java APIs for ASN.1 extension and utility APIs used to support bcpkix and bctls. This jar contains APIs for JDK 1.8 and up. License:
Bouncy Castle Licence: https://www.bouncycastle.org/licence.html File Path: /home/runner/.m2/repository/org/bouncycastle/bcutil-jdk18on/1.78.1/bcutil-jdk18on-1.78.1.jar
MD5: 228149d265033bae6701f70580aa7bf2
SHA1: 5353ca39fe2f148dab9ca1d637a43d0750456254
SHA256: d9fa56f97b0f761ce3bc8d9d74c5d7137a987bf5bd3abfe1003f9bafa45a1d2f
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-pipeline:compile bcutil-jdk18on-1.78.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.bouncycastle/bcpkix-jdk18on@1.78.1 Evidence Type Source Name Value Confidence Vendor file name bcutil-jdk18on High Vendor jar package name bouncycastle Highest Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname bcutil Medium Vendor Manifest multi-release true Low Vendor pom artifactid bcutil-jdk18on Highest Vendor pom artifactid bcutil-jdk18on Low Vendor pom developer email feedback-crypto@bouncycastle.org Low Vendor pom developer id feedback-crypto Medium Vendor pom developer name The Legion of the Bouncy Castle Inc. Medium Vendor pom groupid org.bouncycastle Highest Vendor pom name Bouncy Castle ASN.1 Extension and Utility APIs High Vendor pom url https://www.bouncycastle.org/java.html Highest Product file name bcutil-jdk18on High Product jar package name bouncycastle Highest Product Manifest Bundle-Name bcutil Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname bcutil Medium Product Manifest multi-release true Low Product pom artifactid bcutil-jdk18on Highest Product pom developer email feedback-crypto@bouncycastle.org Low Product pom developer id feedback-crypto Low Product pom developer name The Legion of the Bouncy Castle Inc. Low Product pom groupid org.bouncycastle Highest Product pom name Bouncy Castle ASN.1 Extension and Utility APIs High Product pom url https://www.bouncycastle.org/java.html Medium Version file version 1.78.1 High Version Manifest Bundle-Version 1.78.1 High Version pom version 1.78.1 Highest
Description:
Byte Buddy is a Java library for creating Java classes at run time.
This artifact is a build of Byte Buddy with all ASM dependencies repackaged into its own name space.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/net/bytebuddy/byte-buddy/1.14.13/byte-buddy-1.14.13.jar
MD5: 7f4df0c9277f4c1c418a742cc3178ac9
SHA1: 45cf516d9a23485200950549ff72b204c307fc9d
SHA256: ba8254ff6d612af49acee4cac1108453ce3a417efa548b24f2f4f268cd2b441a
Referenced In Projects/Scopes: shardingsphere-agent-core:compile shardingsphere-agent-metrics-core:provided shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-agent-logging-type:provided shardingsphere-agent-tracing-core:provided shardingsphere-agent-logging-file:provided shardingsphere-agent-metrics-prometheus:provided shardingsphere-agent-tracing-type:provided shardingsphere-agent-plugin-core:provided shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-agent-plugin-logging:provided byte-buddy-1.14.13.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name byte-buddy High Vendor jar package name asm Highest Vendor jar package name build Highest Vendor jar package name bytebuddy Highest Vendor jar package name net Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Vendor Manifest multi-release true Low Vendor pom artifactid byte-buddy Highest Vendor pom artifactid byte-buddy Low Vendor pom groupid net.bytebuddy Highest Vendor pom name Byte Buddy (without dependencies) High Vendor pom parent-artifactid byte-buddy-parent Low Product file name byte-buddy High Product jar package name asm Highest Product jar package name build Highest Product jar package name bytebuddy Highest Product jar package name net Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Byte Buddy (without dependencies) Medium Product Manifest bundle-symbolicname net.bytebuddy.byte-buddy Medium Product Manifest multi-release true Low Product pom artifactid byte-buddy Highest Product pom groupid net.bytebuddy Highest Product pom name Byte Buddy (without dependencies) High Product pom parent-artifactid byte-buddy-parent Medium Version file version 1.14.13 High Version Manifest Bundle-Version 1.14.13 High Version pom version 1.14.13 Highest
Description:
See https://github.com/prometheus/jmx_exporter/blob/master/README.md
File Path: /home/runner/.m2/repository/io/prometheus/jmx/collector/0.16.1/collector-0.16.1.jarMD5: 448ffae38a76caac6c0d0aa7307484f1SHA1: e3c1f67839738654df332dc69e8554e49191575bSHA256: 5866c19941f34e24941e2256a7a7a1471f9c3485f8608ed4d6bc18425888cc9fReferenced In Projects/Scopes:
shardingsphere-agent-metrics-prometheus:compile shardingsphere-agent-distribution:compile collector-0.16.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name collector High Vendor jar package name io Highest Vendor jar package name io Low Vendor jar package name jmx Highest Vendor jar package name jmx Low Vendor jar package name prometheus Highest Vendor jar package name prometheus Low Vendor pom artifactid collector Highest Vendor pom artifactid collector Low Vendor pom groupid io.prometheus.jmx Highest Vendor pom name Prometheus JMX Exporter - Collector High Vendor pom parent-artifactid parent Low Vendor pom url http://github.com/prometheus/jmx_exporter Highest Product file name collector High Product jar package name io Highest Product jar package name jmx Highest Product jar package name jmx Low Product jar package name prometheus Highest Product jar package name prometheus Low Product pom artifactid collector Highest Product pom groupid io.prometheus.jmx Highest Product pom name Prometheus JMX Exporter - Collector High Product pom parent-artifactid parent Medium Product pom url http://github.com/prometheus/jmx_exporter Medium Version file version 0.16.1 High Version pom version 0.16.1 Highest
Description:
Narayana: common File Path: /home/runner/.m2/repository/org/jboss/narayana/common/5.12.7.Final/common-5.12.7.Final.jarMD5: 3a718c74eeb3f5e75337d690b9f576c6SHA1: c7f9414956c439988ab8eae1507778f3d53c0430SHA256: d44191fb489b27eccaa948c57b20f58c242abfbf49a9f61737cbf4a612b4a2f3Referenced In Projects/Scopes:
shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-transaction-xa-narayana:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile common-5.12.7.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.jboss.narayana.jta/jta@5.12.7.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.jboss.narayana.jta/jta@5.12.7.Final pkg:maven/org.jboss.narayana.jta/jta@5.12.7.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name common High Vendor jar package name common Highest Vendor Manifest arjuna-properties-file jbossts-properties.xml Low Vendor Manifest build-jdk-spec 11 Low Vendor Manifest implementation-url http://www.jboss.org/ Low Vendor Manifest Implementation-Vendor JBoss by Red Hat, Inc. High Vendor Manifest Implementation-Vendor-Id http://www.jboss.org/ Medium Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor Manifest specification-vendor JBoss by Red Hat Low Vendor pom artifactid common Highest Vendor pom artifactid common Low Vendor pom groupid org.jboss.narayana Highest Vendor pom name Narayana: common High Vendor pom parent-artifactid narayana-all Low Product file name common High Product jar package name common Highest Product Manifest arjuna-properties-file jbossts-properties.xml Low Product Manifest build-jdk-spec 11 Low Product Manifest Implementation-Title Narayana: common High Product Manifest implementation-url http://www.jboss.org/ Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title Narayana: common Medium Product pom artifactid common Highest Product pom groupid org.jboss.narayana Highest Product pom name Narayana: common High Product pom parent-artifactid narayana-all Medium Version Manifest Implementation-Version 5.12.7.Final High Version pom version 5.12.7.Final Highest
Description:
Apache Commons BeanUtils provides an easy-to-use but flexible wrapper around reflection and introspection. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-beanutils/commons-beanutils/1.9.4/commons-beanutils-1.9.4.jar
MD5: 07dc532ee316fe1f2f0323e9bd2f8df4
SHA1: d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
SHA256: 7d938c81789028045c08c065e94be75fc280527620d5bd62b519d5838532368a
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-beanutils-1.9.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-beanutils High Vendor jar package name apache Highest Vendor jar package name beanutils Highest Vendor jar package name commons Highest Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-beanutils/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-beanutils Medium Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000 Low Vendor Manifest implementation-url https://commons.apache.org/proper/commons-beanutils/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-beanutils Highest Vendor pom artifactid commons-beanutils Low Vendor pom developer email britter@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email craigmcc@apache.org Low Vendor pom developer email dion@apache.org Low Vendor pom developer email epugh@apache.org Low Vendor pom developer email geirm@apache.org Low Vendor pom developer email ggregory@apache.org Low Vendor pom developer email jcarman@apache.org Low Vendor pom developer email jconlon@apache.org Low Vendor pom developer email jstrachan@apache.org Low Vendor pom developer email morgand@apache.org Low Vendor pom developer email mvdb@apache.org Low Vendor pom developer email niallp@apache.org Low Vendor pom developer email rdonkin@apache.org Low Vendor pom developer email rwaldhoff@apache.org Low Vendor pom developer email sanders@apache.org Low Vendor pom developer email scolebourne@apache.org Low Vendor pom developer email skitching@apache.org Low Vendor pom developer email stain@apache.org Low Vendor pom developer email tobrien@apache.org Low Vendor pom developer email yoavs@apache.org Low Vendor pom developer id britter Medium Vendor pom developer id chtompki Medium Vendor pom developer id craigmcc Medium Vendor pom developer id dion Medium Vendor pom developer id epugh Medium Vendor pom developer id geirm Medium Vendor pom developer id ggregory Medium Vendor pom developer id jcarman Medium Vendor pom developer id jconlon Medium Vendor pom developer id jstrachan Medium Vendor pom developer id morgand Medium Vendor pom developer id mvdb Medium Vendor pom developer id niallp Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id scolebourne Medium Vendor pom developer id skitching Medium Vendor pom developer id stain Medium Vendor pom developer id tobrien Medium Vendor pom developer id yoavs Medium Vendor pom developer name Benedikt Ritter Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name David Eric Pugh Medium Vendor pom developer name Dion Gillard Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Geir Magnusson Jr. Medium Vendor pom developer name James Carman Medium Vendor pom developer name James Strachan Medium Vendor pom developer name John E. Conlon Medium Vendor pom developer name Martin van den Bemt Medium Vendor pom developer name Morgan James Delagrange Medium Vendor pom developer name Niall Pemberton Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Simon Kitching Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer name Stian Soiland-Reyes Medium Vendor pom developer name Tim O'Brien Medium Vendor pom developer name Yoav Shapira Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom groupid commons-beanutils Highest Vendor pom name Apache Commons BeanUtils High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url https://commons.apache.org/proper/commons-beanutils/ Highest Product file name commons-beanutils High Product jar package name apache Highest Product jar package name beanutils Highest Product jar package name commons Highest Product Manifest bundle-docurl https://commons.apache.org/proper/commons-beanutils/ Low Product Manifest Bundle-Name Apache Commons BeanUtils Medium Product Manifest bundle-symbolicname org.apache.commons.commons-beanutils Medium Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2019-07-28 22:14:44+0000 Low Product Manifest Implementation-Title Apache Commons BeanUtils High Product Manifest implementation-url https://commons.apache.org/proper/commons-beanutils/ Low Product Manifest specification-title Apache Commons BeanUtils Medium Product pom artifactid commons-beanutils Highest Product pom developer email britter@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email craigmcc@apache.org Low Product pom developer email dion@apache.org Low Product pom developer email epugh@apache.org Low Product pom developer email geirm@apache.org Low Product pom developer email ggregory@apache.org Low Product pom developer email jcarman@apache.org Low Product pom developer email jconlon@apache.org Low Product pom developer email jstrachan@apache.org Low Product pom developer email morgand@apache.org Low Product pom developer email mvdb@apache.org Low Product pom developer email niallp@apache.org Low Product pom developer email rdonkin@apache.org Low Product pom developer email rwaldhoff@apache.org Low Product pom developer email sanders@apache.org Low Product pom developer email scolebourne@apache.org Low Product pom developer email skitching@apache.org Low Product pom developer email stain@apache.org Low Product pom developer email tobrien@apache.org Low Product pom developer email yoavs@apache.org Low Product pom developer id britter Low Product pom developer id chtompki Low Product pom developer id craigmcc Low Product pom developer id dion Low Product pom developer id epugh Low Product pom developer id geirm Low Product pom developer id ggregory Low Product pom developer id jcarman Low Product pom developer id jconlon Low Product pom developer id jstrachan Low Product pom developer id morgand Low Product pom developer id mvdb Low Product pom developer id niallp Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id scolebourne Low Product pom developer id skitching Low Product pom developer id stain Low Product pom developer id tobrien Low Product pom developer id yoavs Low Product pom developer name Benedikt Ritter Low Product pom developer name Craig McClanahan Low Product pom developer name David Eric Pugh Low Product pom developer name Dion Gillard Low Product pom developer name Gary Gregory Low Product pom developer name Geir Magnusson Jr. Low Product pom developer name James Carman Low Product pom developer name James Strachan Low Product pom developer name John E. Conlon Low Product pom developer name Martin van den Bemt Low Product pom developer name Morgan James Delagrange Low Product pom developer name Niall Pemberton Low Product pom developer name Rob Tompkins Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Simon Kitching Low Product pom developer name Stephen Colebourne Low Product pom developer name Stian Soiland-Reyes Low Product pom developer name Tim O'Brien Low Product pom developer name Yoav Shapira Low Product pom developer org The Apache Software Foundation Low Product pom groupid commons-beanutils Highest Product pom name Apache Commons BeanUtils High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url https://commons.apache.org/proper/commons-beanutils/ Medium Version file version 1.9.4 High Version Manifest Bundle-Version 1.9.4 High Version Manifest Implementation-Version 1.9.4 High Version pom parent-version 1.9.4 Low Version pom version 1.9.4 Highest
Description:
Apache Commons CLI provides a simple API for presenting, processing and validating a command line interface.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-cli/commons-cli/1.4/commons-cli-1.4.jar
MD5: c966d7e03507c834d5b09b848560174e
SHA1: c51c00206bb913cd8612b24abd9fa98ae89719b1
SHA256: fd3c7c9545a9cdb2051d1f9155c4f76b1e4ac5a57304404a6eedb578ffba7328
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-cli-1.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-cli High Vendor jar package name apache Highest Vendor jar package name cli Highest Vendor jar package name commons Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-cli/ Low Vendor Manifest bundle-symbolicname org.apache.commons.cli Medium Vendor Manifest implementation-build tags/cli-1.4-RC1@r1786159; 2017-03-09 13:01:35+0000 Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-cli/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-cli Highest Vendor pom artifactid commons-cli Low Vendor pom developer email bob@werken.com Low Vendor pom developer email ebourg@apache.org Low Vendor pom developer email jbjk@mac.com Low Vendor pom developer email jstrachan@apache.org Low Vendor pom developer email roxspring@imapmail.org Low Vendor pom developer email tn@apache.org Low Vendor pom developer id bob Medium Vendor pom developer id ebourg Medium Vendor pom developer id jkeyes Medium Vendor pom developer id jstrachan Medium Vendor pom developer id roxspring Medium Vendor pom developer id tn Medium Vendor pom developer name Bob McWhirter Medium Vendor pom developer name Emmanuel Bourg Medium Vendor pom developer name James Strachan Medium Vendor pom developer name John Keyes Medium Vendor pom developer name Rob Oxspring Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom developer org Ariane Software Medium Vendor pom developer org Indigo Stone Medium Vendor pom developer org integral Source Medium Vendor pom developer org SpiritSoft, Inc. Medium Vendor pom developer org Werken Medium Vendor pom groupid commons-cli Highest Vendor pom name Apache Commons CLI High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/proper/commons-cli/ Highest Product file name commons-cli High Product jar package name apache Highest Product jar package name cli Highest Product jar package name commons Highest Product Manifest bundle-docurl http://commons.apache.org/proper/commons-cli/ Low Product Manifest Bundle-Name Apache Commons CLI Medium Product Manifest bundle-symbolicname org.apache.commons.cli Medium Product Manifest implementation-build tags/cli-1.4-RC1@r1786159; 2017-03-09 13:01:35+0000 Low Product Manifest Implementation-Title Apache Commons CLI High Product Manifest implementation-url http://commons.apache.org/proper/commons-cli/ Low Product Manifest specification-title Apache Commons CLI Medium Product pom artifactid commons-cli Highest Product pom developer email bob@werken.com Low Product pom developer email ebourg@apache.org Low Product pom developer email jbjk@mac.com Low Product pom developer email jstrachan@apache.org Low Product pom developer email roxspring@imapmail.org Low Product pom developer email tn@apache.org Low Product pom developer id bob Low Product pom developer id ebourg Low Product pom developer id jkeyes Low Product pom developer id jstrachan Low Product pom developer id roxspring Low Product pom developer id tn Low Product pom developer name Bob McWhirter Low Product pom developer name Emmanuel Bourg Low Product pom developer name James Strachan Low Product pom developer name John Keyes Low Product pom developer name Rob Oxspring Low Product pom developer name Thomas Neidhart Low Product pom developer org Ariane Software Low Product pom developer org Indigo Stone Low Product pom developer org integral Source Low Product pom developer org SpiritSoft, Inc. Low Product pom developer org Werken Low Product pom groupid commons-cli Highest Product pom name Apache Commons CLI High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/proper/commons-cli/ Medium Version file version 1.4 High Version Manifest Implementation-Version 1.4 High Version pom parent-version 1.4 Low Version pom version 1.4 Highest
Description:
The Apache Commons Collections package contains types that extend and augment the Java Collections Framework. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-collections4/4.1/commons-collections4-4.1.jar
MD5: 45af6a8e5b51d5945de6c7411e290bd1
SHA1: a4cf4688fe1c7e3a63aa636cc96d013af537768e
SHA256: b1fe8b5968b57d8465425357ed2d9dc695504518bed2df5b565c4b8e68c1c8a5
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-collections4-4.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-collections4 High Vendor jar package name apache Highest Vendor jar package name collections4 Highest Vendor jar package name commons Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-collections/ Low Vendor Manifest bundle-symbolicname org.apache.commons.collections4 Medium Vendor Manifest implementation-build tags/COLLECTIONS_4_1_RC2@r1716550; 2015-11-25 22:53:13+0100 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-collections4 Highest Vendor pom artifactid commons-collections4 Low Vendor pom developer id adriannistor Medium Vendor pom developer id amamment Medium Vendor pom developer id bayard Medium Vendor pom developer id craigmcc Medium Vendor pom developer id dlaha Medium Vendor pom developer id geirm Medium Vendor pom developer id ggregory Medium Vendor pom developer id jcarman Medium Vendor pom developer id luc Medium Vendor pom developer id matth Medium Vendor pom developer id mbenson Medium Vendor pom developer id morgand Medium Vendor pom developer id psteitz Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id scolebourne Medium Vendor pom developer id tn Medium Vendor pom developer name Adrian Nistor Medium Vendor pom developer name Arun M. Thomas Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Dipanjan Laha Medium Vendor pom developer name Gary D. Gregory Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name James Carman Medium Vendor pom developer name Luc Maisonobe Medium Vendor pom developer name Matt Benson Medium Vendor pom developer name Matthew Hawthorne Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Phil Steitz Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom developer name Thomas Neidhart Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Collections High Vendor pom parent-artifactid commons-parent Low Vendor pom url http://commons.apache.org/proper/commons-collections/ Highest Product file name commons-collections4 High Product jar package name apache Highest Product jar package name collections4 Highest Product jar package name commons Highest Product Manifest bundle-docurl http://commons.apache.org/proper/commons-collections/ Low Product Manifest Bundle-Name Apache Commons Collections Medium Product Manifest bundle-symbolicname org.apache.commons.collections4 Medium Product Manifest implementation-build tags/COLLECTIONS_4_1_RC2@r1716550; 2015-11-25 22:53:13+0100 Low Product Manifest Implementation-Title Apache Commons Collections High Product Manifest specification-title Apache Commons Collections Medium Product pom artifactid commons-collections4 Highest Product pom developer id adriannistor Low Product pom developer id amamment Low Product pom developer id bayard Low Product pom developer id craigmcc Low Product pom developer id dlaha Low Product pom developer id geirm Low Product pom developer id ggregory Low Product pom developer id jcarman Low Product pom developer id luc Low Product pom developer id matth Low Product pom developer id mbenson Low Product pom developer id morgand Low Product pom developer id psteitz Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id scolebourne Low Product pom developer id tn Low Product pom developer name Adrian Nistor Low Product pom developer name Arun M. Thomas Low Product pom developer name Craig McClanahan Low Product pom developer name Dipanjan Laha Low Product pom developer name Gary D. Gregory Low Product pom developer name Geir Magnusson Low Product pom developer name Henri Yandell Low Product pom developer name James Carman Low Product pom developer name Luc Maisonobe Low Product pom developer name Matt Benson Low Product pom developer name Matthew Hawthorne Low Product pom developer name Morgan Delagrange Low Product pom developer name Phil Steitz Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Stephen Colebourne Low Product pom developer name Thomas Neidhart Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Collections High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-collections/ Medium Version file version 4.1 High Version Manifest Implementation-Version 4.1 High Version pom parent-version 4.1 Low Version pom version 4.1 Highest
Description:
The "commons-compiler" API, including the "IExpressionEvaluator", "IScriptEvaluator", "IClassBodyEvaluator" and "ISimpleCompiler" interfaces. License:
https://spdx.org/licenses/BSD-3-Clause.html File Path: /home/runner/.m2/repository/org/codehaus/janino/commons-compiler/3.1.9/commons-compiler-3.1.9.jar
MD5: e14b760178e0c2105e2951c2f452a1d1
SHA1: f0d70bb319e9339aea90a8665693e69848acc598
SHA256: d988a3ebc17188e9a1a3efadd8e958b90eb995c4fcc077292a5dfe5fe1109d25
Referenced In Projects/Scopes: shardingsphere-proxy-frontend-mysql:runtime shardingsphere-proxy-frontend-postgresql:runtime shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-agent-tracing-core:provided shardingsphere-agent-logging-file:provided shardingsphere-data-pipeline-postgresql:runtime shardingsphere-sql-federation-core:runtime shardingsphere-test-e2e-transaction:runtime shardingsphere-agent-plugin-core:provided shardingsphere-proxy-backend-opengauss:runtime shardingsphere-test-e2e-agent-plugins-logging-file:runtime shardingsphere-agent-plugin-logging:provided shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-spi:runtime shardingsphere-test-e2e-showprocesslist:runtime shardingsphere-test-e2e-agent-engine:runtime shardingsphere-agent-tracing-type:provided shardingsphere-data-pipeline-cdc-core:runtime shardingsphere-test-e2e-agent-plugins-jaeger:runtime shardingsphere-sql-federation-executor:runtime shardingsphere-agent-plugins:provided shardingsphere-data-pipeline-core:runtime shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-distribution:runtime shardingsphere-test-e2e-agent-jdbc-fixture:runtime shardingsphere-agent-logging-type:provided shardingsphere-test-e2e-pipeline:runtime shardingsphere-test-it-pipeline:runtime shardingsphere-data-pipeline-scenario-migration:runtime shardingsphere-jdbc:runtime shardingsphere-sql-federation-distsql-handler:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-data-pipeline-opengauss:runtime shardingsphere-data-pipeline-distsql-handler:runtime shardingsphere-jdbc-distribution:runtime shardingsphere-test-it-optimizer:runtime shardingsphere-test-e2e-agent-proxy-fixture:runtime shardingsphere-test-e2e-sql:runtime shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-agent-plugins-zipkin:runtime shardingsphere-test-e2e-agent-plugins-metrics-prometheus:runtime shardingsphere-test-e2e-env:runtime shardingsphere-proxy-backend-mysql:runtime shardingsphere-data-pipeline-scenario-consistencycheck:runtime shardingsphere-sql-federation-optimizer:runtime shardingsphere-proxy-backend-core:runtime shardingsphere-test-e2e-driver:runtime shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-bootstrap:runtime shardingsphere-proxy-frontend-opengauss:runtime shardingsphere-proxy-backend-postgresql:runtime shardingsphere-agent-plugin-metrics:provided commons-compiler-3.1.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-executor@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.calcite/calcite-core@1.35.0 pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name commons-compiler High Vendor jar package name codehaus Highest Vendor jar package name commons Highest Vendor jar package name compiler Highest Vendor jar package name iclassbodyevaluator Highest Vendor jar package name iexpressionevaluator Highest Vendor jar package name iscriptevaluator Highest Vendor jar package name isimplecompiler Highest Vendor Manifest bundle-symbolicname org.codehaus.janino.commons-compiler;singleton:=true Medium Vendor pom artifactid commons-compiler Highest Vendor pom artifactid commons-compiler Low Vendor pom groupid org.codehaus.janino Highest Vendor pom name commons-compiler High Vendor pom parent-artifactid janino-parent Low Product file name commons-compiler High Product jar package name codehaus Highest Product jar package name commons Highest Product jar package name compiler Highest Product jar package name iclassbodyevaluator Highest Product jar package name iexpressionevaluator Highest Product jar package name iscriptevaluator Highest Product jar package name isimplecompiler Highest Product Manifest Bundle-Name commons-compiler Medium Product Manifest bundle-symbolicname org.codehaus.janino.commons-compiler;singleton:=true Medium Product pom artifactid commons-compiler Highest Product pom groupid org.codehaus.janino Highest Product pom name commons-compiler High Product pom parent-artifactid janino-parent Medium Version file version 3.1.9 High Version Manifest Bundle-Version 3.1.9 High Version pom version 3.1.9 Highest
CVE-2023-33546 suppress
Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by multiple parties because Janino is not intended for use with untrusted input. CWE-787 Out-of-bounds Write
CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
Apache Commons Compress defines an API for working with
compression and archive formats. These include bzip2, gzip, pack200,
LZMA, XZ, Snappy, traditional Unix Compress, DEFLATE, DEFLATE64, LZ4,
Brotli, Zstandard and ar, cpio, jar, tar, zip, dump, 7z, arj.
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-compress/1.26.2/commons-compress-1.26.2.jar
MD5: d2c5abbd0a822c0b79cf4f03ead483ee
SHA1: eb1f823447af685208e684fce84783b43517960c
SHA256: 9168a03141d8fc7eda21a2360d83cc0412bcbb1d6204d992bd48c2573cb3c6b8
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-compress-1.26.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-compress High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name compress Highest Vendor Manifest automatic-module-name org.apache.commons.compress Medium Vendor Manifest build-jdk-spec 17 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Vendor Manifest extension-name org.apache.commons.compress Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest multi-release true Low Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-compress Highest Vendor pom artifactid commons-compress Low Vendor pom developer email bodewig at apache.org Low Vendor pom developer email chtompki at apache.org Low Vendor pom developer email damjan at apache.org Low Vendor pom developer email ebourg at apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email grobmeier at apache.org Low Vendor pom developer email julius at apache.org Low Vendor pom developer email peterlee at apache.org Low Vendor pom developer email sebb at apache.org Low Vendor pom developer email tcurdt at apache.org Low Vendor pom developer id bodewig Medium Vendor pom developer id chtompki Medium Vendor pom developer id damjan Medium Vendor pom developer id ebourg Medium Vendor pom developer id ggregory Medium Vendor pom developer id grobmeier Medium Vendor pom developer id julius Medium Vendor pom developer id peterlee Medium Vendor pom developer id sebb Medium Vendor pom developer id tcurdt Medium Vendor pom developer name Christian Grobmeier Medium Vendor pom developer name Damjan Jovanovic Medium Vendor pom developer name Emmanuel Bourg Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Julius Davies Medium Vendor pom developer name Peter Alfred Lee Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Sebastian Bazley Medium Vendor pom developer name Stefan Bodewig Medium Vendor pom developer name Torsten Curdt Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Compress High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-compress/ Highest Product file name commons-compress High Product jar package name 9 Highest Product jar package name apache Highest Product jar package name commons Highest Product jar package name compress Highest Product Manifest automatic-module-name org.apache.commons.compress Medium Product Manifest build-jdk-spec 17 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-compress/ Low Product Manifest Bundle-Name Apache Commons Compress Medium Product Manifest bundle-symbolicname org.apache.commons.commons-compress Medium Product Manifest extension-name org.apache.commons.compress Medium Product Manifest Implementation-Title Apache Commons Compress High Product Manifest multi-release true Low Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.9 Low Product Manifest specification-title Apache Commons Compress Medium Product pom artifactid commons-compress Highest Product pom developer email bodewig at apache.org Low Product pom developer email chtompki at apache.org Low Product pom developer email damjan at apache.org Low Product pom developer email ebourg at apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email grobmeier at apache.org Low Product pom developer email julius at apache.org Low Product pom developer email peterlee at apache.org Low Product pom developer email sebb at apache.org Low Product pom developer email tcurdt at apache.org Low Product pom developer id bodewig Low Product pom developer id chtompki Low Product pom developer id damjan Low Product pom developer id ebourg Low Product pom developer id ggregory Low Product pom developer id grobmeier Low Product pom developer id julius Low Product pom developer id peterlee Low Product pom developer id sebb Low Product pom developer id tcurdt Low Product pom developer name Christian Grobmeier Low Product pom developer name Damjan Jovanovic Low Product pom developer name Emmanuel Bourg Low Product pom developer name Gary Gregory Low Product pom developer name Julius Davies Low Product pom developer name Peter Alfred Lee Low Product pom developer name Rob Tompkins Low Product pom developer name Sebastian Bazley Low Product pom developer name Stefan Bodewig Low Product pom developer name Torsten Curdt Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Compress High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-compress/ Medium Version file version 1.26.2 High Version Manifest Bundle-Version 1.26.2 High Version Manifest Implementation-Version 1.26.2 High Version pom parent-version 1.26.2 Low Version pom version 1.26.2 Highest
Description:
Tools to assist in the reading of configuration/preferences files in
various formats
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-configuration2/2.1.1/commons-configuration2-2.1.1.jar
MD5: 6c070e57bcd44ed93994f5a33102c277
SHA1: d97d5b3f8b58c52730d47e1a63c8d3258f41ca6c
SHA256: 6471f4c4fb666960eba889b768164670097022d3084018affea555e6bf8d3d79
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-configuration2-2.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-configuration2 High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name configuration Highest Vendor jar package name configuration2 Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-configuration/ Low Vendor Manifest bundle-symbolicname org.apache.commons.configuration Medium Vendor Manifest implementation-build tags/CONFIGURATION_2_1_1_RC1@r1781755; 2017-02-05 13:45:06+0000 Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-configuration/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-configuration2 Highest Vendor pom artifactid commons-configuration2 Low Vendor pom developer email bdunbar@dunbarconsulting.org Low Vendor pom developer email dion@multitask.com.au Low Vendor pom developer email dlr@finemaltcoding.com Low Vendor pom developer email ebourg@apache.org Low Vendor pom developer email epugh@upstate.com Low Vendor pom developer email hps@intermeta.de Low Vendor pom developer email jason@zenplex.com Low Vendor pom developer email joerg.schaible@gmx.de Low Vendor pom developer email mpoeschl@marmot.at Low Vendor pom developer email oheger@apache.org Low Vendor pom developer email rgoers@apache.org Low Vendor pom developer id bdunbar Medium Vendor pom developer id dion Medium Vendor pom developer id dlr Medium Vendor pom developer id ebourg Medium Vendor pom developer id epugh Medium Vendor pom developer id henning Medium Vendor pom developer id joehni Medium Vendor pom developer id jvanzyl Medium Vendor pom developer id mpoeschl Medium Vendor pom developer id oheger Medium Vendor pom developer id rgoers Medium Vendor pom developer name Brian E. Dunbar Medium Vendor pom developer name Daniel Rall Medium Vendor pom developer name dIon Gillard Medium Vendor pom developer name Emmanuel Bourg Medium Vendor pom developer name Eric Pugh Medium Vendor pom developer name Henning P. Schmiedehausen Medium Vendor pom developer name Jörg Schaible Medium Vendor pom developer name Jason van Zyl Medium Vendor pom developer name Martin Poeschl Medium Vendor pom developer name Oliver Heger Medium Vendor pom developer name Ralph Goers Medium Vendor pom developer org Agfa HealthCare Medium Vendor pom developer org Ariane Software Medium Vendor pom developer org CollabNet, Inc. Medium Vendor pom developer org dunbarconsulting.org Medium Vendor pom developer org INTERMETA - Gesellschaft fuer Mehrwertdienste mbH Medium Vendor pom developer org Intuit Medium Vendor pom developer org Multitask Consulting Medium Vendor pom developer org tucana.at Medium Vendor pom developer org upstate.com Medium Vendor pom developer org Zenplex Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Configuration High Vendor pom parent-artifactid commons-parent Low Vendor pom url http://commons.apache.org/proper/commons-configuration/ Highest Product file name commons-configuration2 High Product jar package name apache Highest Product jar package name commons Highest Product jar package name configuration Highest Product jar package name configuration2 Highest Product Manifest bundle-docurl http://commons.apache.org/proper/commons-configuration/ Low Product Manifest Bundle-Name Apache Commons Configuration Medium Product Manifest bundle-symbolicname org.apache.commons.configuration Medium Product Manifest implementation-build tags/CONFIGURATION_2_1_1_RC1@r1781755; 2017-02-05 13:45:06+0000 Low Product Manifest Implementation-Title Apache Commons Configuration High Product Manifest implementation-url http://commons.apache.org/proper/commons-configuration/ Low Product Manifest specification-title Apache Commons Configuration Medium Product pom artifactid commons-configuration2 Highest Product pom developer email bdunbar@dunbarconsulting.org Low Product pom developer email dion@multitask.com.au Low Product pom developer email dlr@finemaltcoding.com Low Product pom developer email ebourg@apache.org Low Product pom developer email epugh@upstate.com Low Product pom developer email hps@intermeta.de Low Product pom developer email jason@zenplex.com Low Product pom developer email joerg.schaible@gmx.de Low Product pom developer email mpoeschl@marmot.at Low Product pom developer email oheger@apache.org Low Product pom developer email rgoers@apache.org Low Product pom developer id bdunbar Low Product pom developer id dion Low Product pom developer id dlr Low Product pom developer id ebourg Low Product pom developer id epugh Low Product pom developer id henning Low Product pom developer id joehni Low Product pom developer id jvanzyl Low Product pom developer id mpoeschl Low Product pom developer id oheger Low Product pom developer id rgoers Low Product pom developer name Brian E. Dunbar Low Product pom developer name Daniel Rall Low Product pom developer name dIon Gillard Low Product pom developer name Emmanuel Bourg Low Product pom developer name Eric Pugh Low Product pom developer name Henning P. Schmiedehausen Low Product pom developer name Jörg Schaible Low Product pom developer name Jason van Zyl Low Product pom developer name Martin Poeschl Low Product pom developer name Oliver Heger Low Product pom developer name Ralph Goers Low Product pom developer org Agfa HealthCare Low Product pom developer org Ariane Software Low Product pom developer org CollabNet, Inc. Low Product pom developer org dunbarconsulting.org Low Product pom developer org INTERMETA - Gesellschaft fuer Mehrwertdienste mbH Low Product pom developer org Intuit Low Product pom developer org Multitask Consulting Low Product pom developer org tucana.at Low Product pom developer org upstate.com Low Product pom developer org Zenplex Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Configuration High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-configuration/ Medium Version file version 2.1.1 High Version Manifest Bundle-Version 2.1.1 High Version Manifest Implementation-Version 2.1.1 High Version pom parent-version 2.1.1 Low Version pom version 2.1.1 Highest
CVE-2024-29131 (OSSINDEX)suppress
Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.
Users are recommended to upgrade to version 2.10.1, which fixes the issue.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-29131 for details CWE-787 Out-of-bounds Write
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.apache.commons:commons-configuration2:2.1.1:*:*:*:*:*:*:* CVE-2024-29133 (OSSINDEX)suppress
Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration: from 2.0 before 2.10.1.
Users are recommended to upgrade to version 2.10.1, which fixes the issue.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-29133 for details CWE-787 Out-of-bounds Write
CVSSv3:
Base Score: MEDIUM (4.400000095367432) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.apache.commons:commons-configuration2:2.1.1:*:*:*:*:*:*:* Description:
Apache Commons Crypto is a cryptographic library optimized with AES-NI (Advanced Encryption Standard New Instructions). It provides Java API for both cipher level and Java stream level. Developers can use it to implement high performance AES encryption/decryption with the minimum code and effort. Please note that Crypto doesn't implement the cryptographic algorithm such as AES directly. It wraps to Openssl or JCE which implement the algorithms. Features -------- 1. Cipher API for low level cryptographic operations. 2. Java stream API (CryptoInputStream/CryptoOutputStream) for high level stream encyrption/decryption. 3. Both optimized with high performance AES encryption/decryption. (1400 MB/s - 1700 MB/s throughput in modern Xeon processors). 4. JNI-based implementation to achieve comparable performance to the native C++ version based on OpenSsl. 5. Portable across various operating systems (currently only Linux/MacOSX/Windows); Apache Commons Crypto loads the library according to your machine environment (it checks system properties, `os.name` and `os.arch`). 6. Simple usage. Add the commons-crypto-(version).jar file to your classpath. Export restrictions ------------------- This distribution includes cryptographic software. The country in which you currently reside may have restrictions on the import, possession, use, and/or re-export to another country, of encryption software. BEFORE using any encryption software, please check your country's laws, regulations and policies concerning the import, possession, or use, and re-export of encryption software, to see if this is permitted. See for more information. The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) 5D002.C.1, which includes information security software using or performing cryptographic functions with asymmetric algorithms. The form and manner of this Apache Software Foundation distribution makes it eligible for export under the License Exception ENC Technology Software Unrestricted (TSU) exception (see the BIS Export Administration Regulations, Section 740.13) for both object code and source code. The following provides more details on the included cryptographic software: * Commons Crypto use [Java Cryptography Extension](http://docs.oracle.com/javase/8/docs/technotes/guides/security/crypto/CryptoSpec.html) provided by Java * Commons Crypto link to and use [OpenSSL](https://www.openssl.org/) ciphers License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-crypto/1.0.0/commons-crypto-1.0.0.jar
MD5: 981c95e38457b10d429090496b96f2d6
SHA1: 7938f66b01f62f03ef8af8a64401e85e45d51c5d
SHA256: 0043d8d74d8df632c57f938828e6f6efd555e293a9079dcdf59eab8e40107491
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-crypto-1.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-crypto High Vendor jar package name apache Highest Vendor jar package name cipher Highest Vendor jar package name commons Highest Vendor jar package name crypto Highest Vendor jar package name stream Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-crypto/ Low Vendor Manifest bundle-symbolicname org.apache.commons.crypto Medium Vendor Manifest implementation-build CRYPTO-1.0.0@r782ca06a1f9a292756fbad9eb9841e685cd34af1; 2016-07-26 09:19:11+0800 Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-crypto/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-crypto Highest Vendor pom artifactid commons-crypto Low Vendor pom developer email atm@apache.org Low Vendor pom developer email cmccabe@apache.org Low Vendor pom developer email cnauroth@apache.org Low Vendor pom developer email dianfu@apache.org Low Vendor pom developer email dongc@apache.org Low Vendor pom developer email haifengchen@apache.org Low Vendor pom developer email sdp@apache.org Low Vendor pom developer email umamahesh@apache.org Low Vendor pom developer email vanzin@apache.org Low Vendor pom developer email wang@apache.org Low Vendor pom developer email xuf@apache.org Low Vendor pom developer email yliu@apache.org Low Vendor pom developer id atm Medium Vendor pom developer id cmccabe Medium Vendor pom developer id cnauroth Medium Vendor pom developer id dianfu Medium Vendor pom developer id dongc Medium Vendor pom developer id haifengchen Medium Vendor pom developer id sdp Medium Vendor pom developer id umamahesh Medium Vendor pom developer id vanzin Medium Vendor pom developer id wang Medium Vendor pom developer id xuf Medium Vendor pom developer id yliu Medium Vendor pom developer name Aaron T Myers Medium Vendor pom developer name Andrew Wang Medium Vendor pom developer name Chris Nauroth Medium Vendor pom developer name Colin P. McCabe Medium Vendor pom developer name Dapeng Sun Medium Vendor pom developer name Dian Fu Medium Vendor pom developer name Dong Chen Medium Vendor pom developer name Ferdinand Xu Medium Vendor pom developer name Haifeng Chen Medium Vendor pom developer name Marcelo Vanzin Medium Vendor pom developer name Uma Maheswara Rao G Medium Vendor pom developer name Yi Liu Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Crypto High Vendor pom parent-artifactid commons-parent Low Vendor pom url http://commons.apache.org/proper/commons-crypto/ Highest Product file name commons-crypto High Product jar package name apache Highest Product jar package name cipher Highest Product jar package name commons Highest Product jar package name crypto Highest Product jar package name stream Highest Product Manifest bundle-docurl http://commons.apache.org/proper/commons-crypto/ Low Product Manifest Bundle-Name Apache Commons Crypto Medium Product Manifest bundle-symbolicname org.apache.commons.crypto Medium Product Manifest implementation-build CRYPTO-1.0.0@r782ca06a1f9a292756fbad9eb9841e685cd34af1; 2016-07-26 09:19:11+0800 Low Product Manifest Implementation-Title Apache Commons Crypto High Product Manifest implementation-url http://commons.apache.org/proper/commons-crypto/ Low Product Manifest specification-title Apache Commons Crypto Medium Product pom artifactid commons-crypto Highest Product pom developer email atm@apache.org Low Product pom developer email cmccabe@apache.org Low Product pom developer email cnauroth@apache.org Low Product pom developer email dianfu@apache.org Low Product pom developer email dongc@apache.org Low Product pom developer email haifengchen@apache.org Low Product pom developer email sdp@apache.org Low Product pom developer email umamahesh@apache.org Low Product pom developer email vanzin@apache.org Low Product pom developer email wang@apache.org Low Product pom developer email xuf@apache.org Low Product pom developer email yliu@apache.org Low Product pom developer id atm Low Product pom developer id cmccabe Low Product pom developer id cnauroth Low Product pom developer id dianfu Low Product pom developer id dongc Low Product pom developer id haifengchen Low Product pom developer id sdp Low Product pom developer id umamahesh Low Product pom developer id vanzin Low Product pom developer id wang Low Product pom developer id xuf Low Product pom developer id yliu Low Product pom developer name Aaron T Myers Low Product pom developer name Andrew Wang Low Product pom developer name Chris Nauroth Low Product pom developer name Colin P. McCabe Low Product pom developer name Dapeng Sun Low Product pom developer name Dian Fu Low Product pom developer name Dong Chen Low Product pom developer name Ferdinand Xu Low Product pom developer name Haifeng Chen Low Product pom developer name Marcelo Vanzin Low Product pom developer name Uma Maheswara Rao G Low Product pom developer name Yi Liu Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Crypto High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-crypto/ Medium Version file version 1.0.0 High Version Manifest Bundle-Version 1.0.0 High Version Manifest Implementation-Version 1.0.0 High Version pom parent-version 1.0.0 Low Version pom version 1.0.0 Highest
File Path: /home/runner/.m2/repository/org/apache/commons/commons-crypto/1.0.0/commons-crypto-1.0.0.jar/org/apache/commons/crypto/native/Windows/x86/commons-crypto.dllMD5: 80df8a7e2032790a467db967ce60182eSHA1: 2a8efda075679e8a913347c52f409015b4ce2e96SHA256: 02e008efb98e14d5b1f16a2219f71ad179ff301bed5a2267883c28d74bcfe6beReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name commons-crypto High Product file name commons-crypto High
File Path: /home/runner/.m2/repository/org/apache/commons/commons-crypto/1.0.0/commons-crypto-1.0.0.jar/org/apache/commons/crypto/native/Windows/x86_64/commons-crypto.dllMD5: a330d40c0b4016e6fcff609473eeb44eSHA1: ed34492e05a31791856eaecdd436db9a875926ebSHA256: 6d8783ac18bc5f770af7371fcf9684af4b531cad982e62ffe508fca22afa573fReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name commons-crypto High Product file name commons-crypto High
Description:
The Apache Commons CSV library provides a simple interface for reading and writing CSV files of various types. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-csv/1.9.0/commons-csv-1.9.0.jar
MD5: 75559edcb39c783299289690c5a45816
SHA1: b59d8f64cd0b83ee1c04ff1748de2504457018c1
SHA256: c418d6aab4db4f1f70983d355de8d7c1e755c754820a92294da2e5f5081022cc
Referenced In Projects/Scopes: shardingsphere-test-it-parser:compile shardingsphere-test-it-optimizer:compile commons-csv-1.9.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name commons-csv High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name csv Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-csv/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-csv Medium Vendor Manifest implementation-build release@r8e25a2b30cae841101540c26ff21b79c51ad3eff; 2021-07-24 15:40:36+0000 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-csv Highest Vendor pom artifactid commons-csv Low Vendor pom developer email bayard@apache.org Low Vendor pom developer email britter@apache.org Low Vendor pom developer email chtompki@apache.org Low Vendor pom developer email ebourg@apache.org Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer email mvdb@apache.org Low Vendor pom developer email yonik@apache.org Low Vendor pom developer id bayard Medium Vendor pom developer id britter Medium Vendor pom developer id chtompki Medium Vendor pom developer id ebourg Medium Vendor pom developer id ggregory Medium Vendor pom developer id mvdb Medium Vendor pom developer id yonik Medium Vendor pom developer name Benedikt Ritter Medium Vendor pom developer name Emmanuel Bourg Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name Martin van den Bemt Medium Vendor pom developer name Rob Tompkins Medium Vendor pom developer name Yonik Seeley Medium Vendor pom developer org Apache Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons CSV High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-csv/ Highest Product file name commons-csv High Product jar package name apache Highest Product jar package name commons Highest Product jar package name csv Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-csv/ Low Product Manifest Bundle-Name Apache Commons CSV Medium Product Manifest bundle-symbolicname org.apache.commons.commons-csv Medium Product Manifest implementation-build release@r8e25a2b30cae841101540c26ff21b79c51ad3eff; 2021-07-24 15:40:36+0000 Low Product Manifest Implementation-Title Apache Commons CSV High Product Manifest specification-title Apache Commons CSV Medium Product pom artifactid commons-csv Highest Product pom developer email bayard@apache.org Low Product pom developer email britter@apache.org Low Product pom developer email chtompki@apache.org Low Product pom developer email ebourg@apache.org Low Product pom developer email ggregory at apache.org Low Product pom developer email mvdb@apache.org Low Product pom developer email yonik@apache.org Low Product pom developer id bayard Low Product pom developer id britter Low Product pom developer id chtompki Low Product pom developer id ebourg Low Product pom developer id ggregory Low Product pom developer id mvdb Low Product pom developer id yonik Low Product pom developer name Benedikt Ritter Low Product pom developer name Emmanuel Bourg Low Product pom developer name Gary Gregory Low Product pom developer name Henri Yandell Low Product pom developer name Martin van den Bemt Low Product pom developer name Rob Tompkins Low Product pom developer name Yonik Seeley Low Product pom developer org Apache Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons CSV High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-csv/ Medium Version file version 1.9.0 High Version Manifest Bundle-Version 1.9.0 High Version Manifest Implementation-Version 1.9.0 High Version pom parent-version 1.9.0 Low Version pom version 1.9.0 Highest
Description:
Apache Commons Daemon software provides an alternative invocation mechanism for unix-daemon-like Java code.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-daemon/commons-daemon/1.0.13/commons-daemon-1.0.13.jar
MD5: 686f1a2cc85f8f4e939bd3cd28c9720b
SHA1: 750856a1fdb3ddf721ccf73c3518e4211cffc3a3
SHA256: fd63b583fd3e8baeae22efacbd5a4f91c1fd97f56248e62e2615efa7b81daeaa
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-daemon-1.0.13.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-daemon High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name daemon Highest Vendor Manifest bundle-docurl http://commons.apache.org/daemon/ Low Vendor Manifest bundle-symbolicname org.apache.commons.daemon Medium Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2013-02-06 19:20:07+0100 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-daemon Highest Vendor pom artifactid commons-daemon Low Vendor pom developer email billbarker at apache.org Low Vendor pom developer email jfclere at apache.org Low Vendor pom developer email mturk at apache.org Low Vendor pom developer email remm at apache.org Low Vendor pom developer email yoavs at apache.org Low Vendor pom developer id billbarker Medium Vendor pom developer id jfclere Medium Vendor pom developer id mturk Medium Vendor pom developer id remm Medium Vendor pom developer id yoavs Medium Vendor pom developer name Bill Barker Medium Vendor pom developer name Jean-Frederic Clere Medium Vendor pom developer name Mladen Turk Medium Vendor pom developer name Remy Maucherat Medium Vendor pom developer name Yoav Shapira Medium Vendor pom groupid commons-daemon Highest Vendor pom name Commons Daemon High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/daemon/ Highest Product file name commons-daemon High Product jar package name apache Highest Product jar package name commons Highest Product jar package name daemon Highest Product Manifest bundle-docurl http://commons.apache.org/daemon/ Low Product Manifest Bundle-Name Commons Daemon Medium Product Manifest bundle-symbolicname org.apache.commons.daemon Medium Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2013-02-06 19:20:07+0100 Low Product Manifest Implementation-Title Commons Daemon High Product Manifest specification-title Commons Daemon Medium Product pom artifactid commons-daemon Highest Product pom developer email billbarker at apache.org Low Product pom developer email jfclere at apache.org Low Product pom developer email mturk at apache.org Low Product pom developer email remm at apache.org Low Product pom developer email yoavs at apache.org Low Product pom developer id billbarker Low Product pom developer id jfclere Low Product pom developer id mturk Low Product pom developer id remm Low Product pom developer id yoavs Low Product pom developer name Bill Barker Low Product pom developer name Jean-Frederic Clere Low Product pom developer name Mladen Turk Low Product pom developer name Remy Maucherat Low Product pom developer name Yoav Shapira Low Product pom groupid commons-daemon Highest Product pom name Commons Daemon High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/daemon/ Medium Version file version 1.0.13 High Version Manifest Bundle-Version 1.0.13 High Version Manifest Implementation-Version 1.0.13 High Version pom parent-version 1.0.13 Low Version pom version 1.0.13 Highest
Description:
Apache Commons Exec is a library to reliably execute external processes from within the JVM. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-exec/1.3/commons-exec-1.3.jar
MD5: 8bb8fa2edfd60d5c7ed6bf9923d14aa8
SHA1: 8dfb9facd0830a27b1b5f29f84593f0aeee7773b
SHA256: cb49812dc1bfb0ea4f20f398bcae1a88c6406e213e67f7524fb10d4f8ad9347b
Referenced In Projects/Scopes: shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-agent-logging-file:provided shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile commons-exec-1.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-schedule-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name commons-exec High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name exec Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-exec/ Low Vendor Manifest bundle-symbolicname org.apache.commons.exec Medium Vendor Manifest implementation-build trunk@r1636211; 2014-11-02 23:51:55+0000 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-exec Highest Vendor pom artifactid commons-exec Low Vendor pom developer email ggregory@apache.org Low Vendor pom developer id brett Medium Vendor pom developer id ggregory Medium Vendor pom developer id sebb Medium Vendor pom developer id sgoeschl Medium Vendor pom developer id trygvis Medium Vendor pom developer name Brett Porter Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Sebastian Bazley Medium Vendor pom developer name Siegfried Goeschl Medium Vendor pom developer name Trygve Laugstøl Medium Vendor pom developer org Apache Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Exec High Vendor pom parent-artifactid commons-parent Low Vendor pom url http://commons.apache.org/proper/commons-exec/ Highest Product file name commons-exec High Product jar package name apache Highest Product jar package name commons Highest Product jar package name exec Highest Product Manifest bundle-docurl http://commons.apache.org/proper/commons-exec/ Low Product Manifest Bundle-Name Apache Commons Exec Medium Product Manifest bundle-symbolicname org.apache.commons.exec Medium Product Manifest implementation-build trunk@r1636211; 2014-11-02 23:51:55+0000 Low Product Manifest Implementation-Title Apache Commons Exec High Product Manifest specification-title Apache Commons Exec Medium Product pom artifactid commons-exec Highest Product pom developer email ggregory@apache.org Low Product pom developer id brett Low Product pom developer id ggregory Low Product pom developer id sebb Low Product pom developer id sgoeschl Low Product pom developer id trygvis Low Product pom developer name Brett Porter Low Product pom developer name Gary Gregory Low Product pom developer name Sebastian Bazley Low Product pom developer name Siegfried Goeschl Low Product pom developer name Trygve Laugstøl Low Product pom developer org Apache Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Exec High Product pom parent-artifactid commons-parent Medium Product pom url http://commons.apache.org/proper/commons-exec/ Medium Version file version 1.3 High Version Manifest Implementation-Version 1.3 High Version pom parent-version 1.3 Low Version pom version 1.3 Highest
Description:
Apache Commons Net library contains a collection of network utilities and protocol implementations.
Supported protocols include: Echo, Finger, FTP, NNTP, NTP, POP3(S), SMTP(S), Telnet, Whois
License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-net/commons-net/3.6/commons-net-3.6.jar
MD5: b46661b01cc7aeec501f1cd3775509f1
SHA1: b71de00508dcb078d2b24b5fa7e538636de9b3da
SHA256: d3b3866c61a47ba3bf040ab98e60c3010d027da0e7a99e1755e407dd47bc2702
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-net-3.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-net High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name echo Highest Vendor jar package name finger Highest Vendor jar package name ftp Highest Vendor jar package name net Highest Vendor jar package name nntp Highest Vendor jar package name pop3 Highest Vendor jar package name smtp Highest Vendor jar package name telnet Highest Vendor jar package name whois Highest Vendor Manifest bundle-docurl http://commons.apache.org/proper/commons-net/ Low Vendor Manifest bundle-symbolicname org.apache.commons.net Medium Vendor Manifest implementation-build tags/NET_3_6_RC1@r1782607; 2017-02-11 15:16:26+0000 Low Vendor Manifest implementation-url http://commons.apache.org/proper/commons-net/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-net Highest Vendor pom artifactid commons-net Low Vendor pom developer email bruno.davanzo@hp.com Low Vendor pom developer email dfs@apache.org Low Vendor pom developer email Jeff.Brekke@qg.com Low Vendor pom developer email rwinston@apache.org Low Vendor pom developer email rwinston@checkfree.com Low Vendor pom developer email scohen@apache.org Low Vendor pom developer id brekke Medium Vendor pom developer id brudav Medium Vendor pom developer id dfs Medium Vendor pom developer id rwinston Medium Vendor pom developer id scohen Medium Vendor pom developer name Bruno D'Avanzo Medium Vendor pom developer name Daniel F. Savarese Medium Vendor pom developer name Jeffrey D. Brekke Medium Vendor pom developer name Rory Winston Medium Vendor pom developer name Steve Cohen Medium Vendor pom developer org
<a href="http://www.savarese.com/">Savarese Software Research</a>
Medium Vendor pom developer org Hewlett-Packard Medium Vendor pom developer org javactivity.org Medium Vendor pom developer org Quad/Graphics, Inc. Medium Vendor pom groupid commons-net Highest Vendor pom name Apache Commons Net High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/proper/commons-net/ Highest Product file name commons-net High Product jar package name apache Highest Product jar package name commons Highest Product jar package name echo Highest Product jar package name finger Highest Product jar package name ftp Highest Product jar package name net Highest Product jar package name nntp Highest Product jar package name pop3 Highest Product jar package name smtp Highest Product jar package name telnet Highest Product jar package name whois Highest Product Manifest bundle-docurl http://commons.apache.org/proper/commons-net/ Low Product Manifest Bundle-Name Apache Commons Net Medium Product Manifest bundle-symbolicname org.apache.commons.net Medium Product Manifest implementation-build tags/NET_3_6_RC1@r1782607; 2017-02-11 15:16:26+0000 Low Product Manifest Implementation-Title Apache Commons Net High Product Manifest implementation-url http://commons.apache.org/proper/commons-net/ Low Product Manifest specification-title Apache Commons Net Medium Product pom artifactid commons-net Highest Product pom developer email bruno.davanzo@hp.com Low Product pom developer email dfs@apache.org Low Product pom developer email Jeff.Brekke@qg.com Low Product pom developer email rwinston@apache.org Low Product pom developer email rwinston@checkfree.com Low Product pom developer email scohen@apache.org Low Product pom developer id brekke Low Product pom developer id brudav Low Product pom developer id dfs Low Product pom developer id rwinston Low Product pom developer id scohen Low Product pom developer name Bruno D'Avanzo Low Product pom developer name Daniel F. Savarese Low Product pom developer name Jeffrey D. Brekke Low Product pom developer name Rory Winston Low Product pom developer name Steve Cohen Low Product pom developer org
<a href="http://www.savarese.com/">Savarese Software Research</a>
Low Product pom developer org Hewlett-Packard Low Product pom developer org javactivity.org Low Product pom developer org Quad/Graphics, Inc. Low Product pom groupid commons-net Highest Product pom name Apache Commons Net High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/proper/commons-net/ Medium Version file version 3.6 High Version Manifest Implementation-Version 3.6 High Version pom parent-version 3.6 Low Version pom version 3.6 Highest
CVE-2021-37533 suppress
Prior to Apache Commons Net 3.9.0, Net's FTP client trusts the host from PASV response by default. A malicious server can redirect the Commons Net code to use a different host, but the user has to connect to the malicious server in the first place. This may lead to leakage of information about services running on the private network of the client. The default in version 3.9.0 is now false to ignore such hosts, as cURL does. See https://issues.apache.org/jira/browse/NET-711. CWE-20 Improper Input Validation
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
Commons Object Pooling Library License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-pool/commons-pool/1.5.4/commons-pool-1.5.4.jar
MD5: 80e9d1cbd70542f4f293793d109679a9
SHA1: 75b6e20c596ed2945a259cea26d7fadd298398e6
SHA256: 22095672ac3ad6503e42ec6d4cbc330cd1318040223f6c5d9605473b6d2aa0fd
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
commons-pool-1.5.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name commons-pool High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name pool Highest Vendor Manifest bundle-docurl http://commons.apache.org/pool/ Low Vendor Manifest bundle-symbolicname org.apache.commons.pool Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-pool Highest Vendor pom artifactid commons-pool Low Vendor pom developer id craigmcc Medium Vendor pom developer id dirkv Medium Vendor pom developer id dweinr1 Medium Vendor pom developer id geirm Medium Vendor pom developer id morgand Medium Vendor pom developer id psteitz Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sandymac Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name David Weinrich Medium Vendor pom developer name Dirk Verbeeck Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Phil Steitz Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Sandy McArthur Medium Vendor pom developer org Apache Software Foundation Medium Vendor pom groupid commons-pool Highest Vendor pom name Commons Pool High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/pool/ Highest Product file name commons-pool High Product jar package name apache Highest Product jar package name commons Highest Product jar package name pool Highest Product Manifest bundle-docurl http://commons.apache.org/pool/ Low Product Manifest Bundle-Name Commons Pool Medium Product Manifest bundle-symbolicname org.apache.commons.pool Medium Product Manifest Implementation-Title Commons Pool High Product Manifest specification-title Commons Pool Medium Product pom artifactid commons-pool Highest Product pom developer id craigmcc Low Product pom developer id dirkv Low Product pom developer id dweinr1 Low Product pom developer id geirm Low Product pom developer id morgand Low Product pom developer id psteitz Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id sandymac Low Product pom developer name Craig McClanahan Low Product pom developer name David Weinrich Low Product pom developer name Dirk Verbeeck Low Product pom developer name Geir Magnusson Low Product pom developer name Morgan Delagrange Low Product pom developer name Phil Steitz Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Sandy McArthur Low Product pom developer org Apache Software Foundation Low Product pom groupid commons-pool Highest Product pom name Commons Pool High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/pool/ Medium Version file version 1.5.4 High Version Manifest Bundle-Version 1.5.4 High Version Manifest Implementation-Version 1.5.4 High Version pom parent-version 1.5.4 Low Version pom version 1.5.4 Highest
Description:
Commons Object Pooling Library License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/commons-pool/commons-pool/1.6/commons-pool-1.6.jar
MD5: 5ca02245c829422176d23fa530e919cc
SHA1: 4572d589699f09d866a226a14b7f4323c6d8f040
SHA256: 46c42b4a38dc6b2db53a9ee5c92c63db103665d56694e2cfce2c95d51a6860cc
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
commons-pool-1.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name commons-pool High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name pool Highest Vendor Manifest bundle-docurl http://commons.apache.org/pool/ Low Vendor Manifest bundle-symbolicname org.apache.commons.pool Medium Vendor Manifest implementation-build UNKNOWN_BRANCH@r??????; 2012-01-04 10:31:47-0500 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-pool Highest Vendor pom artifactid commons-pool Low Vendor pom developer id craigmcc Medium Vendor pom developer id dirkv Medium Vendor pom developer id dweinr1 Medium Vendor pom developer id geirm Medium Vendor pom developer id ggregory Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sandymac Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name David Weinrich Medium Vendor pom developer name Dirk Verbeeck Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Sandy McArthur Medium Vendor pom developer org Apache Software Foundation Medium Vendor pom groupid commons-pool Highest Vendor pom name Commons Pool High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/pool/ Highest Product file name commons-pool High Product jar package name apache Highest Product jar package name commons Highest Product jar package name pool Highest Product Manifest bundle-docurl http://commons.apache.org/pool/ Low Product Manifest Bundle-Name Commons Pool Medium Product Manifest bundle-symbolicname org.apache.commons.pool Medium Product Manifest implementation-build UNKNOWN_BRANCH@r??????; 2012-01-04 10:31:47-0500 Low Product Manifest Implementation-Title Commons Pool High Product Manifest specification-title Commons Pool Medium Product pom artifactid commons-pool Highest Product pom developer id craigmcc Low Product pom developer id dirkv Low Product pom developer id dweinr1 Low Product pom developer id geirm Low Product pom developer id ggregory Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id sandymac Low Product pom developer name Craig McClanahan Low Product pom developer name David Weinrich Low Product pom developer name Dirk Verbeeck Low Product pom developer name Gary Gregory Low Product pom developer name Geir Magnusson Low Product pom developer name Morgan Delagrange Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Sandy McArthur Low Product pom developer org Apache Software Foundation Low Product pom groupid commons-pool Highest Product pom name Commons Pool High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/pool/ Medium Version file version 1.6 High Version Manifest Implementation-Version 1.6 High Version pom parent-version 1.6 Low Version pom version 1.6 Highest
Description:
The Apache Commons Object Pooling Library. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-pool2/2.11.1/commons-pool2-2.11.1.jar
MD5: 2210a041929e7c94485d5402458340b9
SHA1: 8970fd110c965f285ed4c6e40be7630c62db6f68
SHA256: ea0505ee7515e58b1ac0e686e4d1a5d9f7d808e251a61bc371aa0595b9963f83
Referenced In Project/Scope: shardingsphere-global-clock-tso-provider-redis:provided
commons-pool2-2.11.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/redis.clients/jedis@4.4.6
Evidence Type Source Name Value Confidence Vendor file name commons-pool2 High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name pool2 Highest Vendor Manifest automatic-module-name org.apache.commons.pool2 Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-pool/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-pool2 Medium Vendor Manifest implementation-build release@rabb1a0797b406566f0214c688871ab7e8fdc2601; 2021-08-14 13:51:45+0000 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-pool2 Highest Vendor pom artifactid commons-pool2 Low Vendor pom developer email ggregory at apache.org Low Vendor pom developer id craigmcc Medium Vendor pom developer id dirkv Medium Vendor pom developer id dweinr1 Medium Vendor pom developer id geirm Medium Vendor pom developer id ggregory Medium Vendor pom developer id mattsicker Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sandymac Medium Vendor pom developer id simonetripodi Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name David Weinrich Medium Vendor pom developer name Dirk Verbeeck Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Matt Sicker Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Sandy McArthur Medium Vendor pom developer name Simone Tripodi Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom developer org URL https://www.apache.org/ Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Pool High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-pool/ Highest Product file name commons-pool2 High Product jar package name apache Highest Product jar package name commons Highest Product jar package name pool2 Highest Product Manifest automatic-module-name org.apache.commons.pool2 Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-pool/ Low Product Manifest Bundle-Name Apache Commons Pool Medium Product Manifest bundle-symbolicname org.apache.commons.commons-pool2 Medium Product Manifest implementation-build release@rabb1a0797b406566f0214c688871ab7e8fdc2601; 2021-08-14 13:51:45+0000 Low Product Manifest Implementation-Title Apache Commons Pool High Product Manifest specification-title Apache Commons Pool Medium Product pom artifactid commons-pool2 Highest Product pom developer email ggregory at apache.org Low Product pom developer id craigmcc Low Product pom developer id dirkv Low Product pom developer id dweinr1 Low Product pom developer id geirm Low Product pom developer id ggregory Low Product pom developer id mattsicker Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id sandymac Low Product pom developer id simonetripodi Low Product pom developer name Craig McClanahan Low Product pom developer name David Weinrich Low Product pom developer name Dirk Verbeeck Low Product pom developer name Gary Gregory Low Product pom developer name Geir Magnusson Low Product pom developer name Matt Sicker Low Product pom developer name Morgan Delagrange Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Sandy McArthur Low Product pom developer name Simone Tripodi Low Product pom developer org The Apache Software Foundation Low Product pom developer org URL https://www.apache.org/ Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Pool High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-pool/ Medium Version file version 2.11.1 High Version Manifest Bundle-Version 2.11.1 High Version Manifest Implementation-Version 2.11.1 High Version pom parent-version 2.11.1 Low Version pom version 2.11.1 Highest
Description:
The Apache Commons Object Pooling Library. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/commons/commons-pool2/2.9.0/commons-pool2-2.9.0.jar
MD5: 1f14cc5528953687f915bddf4fe150ec
SHA1: 58e9e8bbd29cf3e7861cb80c0a615770baffe840
SHA256: bc919b426bfafb31ecc45d6652a9f137462465d849fb3873d78d90c3f8d35b01
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
commons-pool2-2.9.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name commons-pool2 High Vendor jar package name apache Highest Vendor jar package name commons Highest Vendor jar package name pool2 Highest Vendor Manifest automatic-module-name org.apache.commons.pool2 Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://commons.apache.org/proper/commons-pool/ Low Vendor Manifest bundle-symbolicname org.apache.commons.commons-pool2 Medium Vendor Manifest implementation-build release@re855619858edd5aae1a6b49788bb7212eb77ec23; 2020-09-25 17:30:04+0000 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid commons-pool2 Highest Vendor pom artifactid commons-pool2 Low Vendor pom developer id craigmcc Medium Vendor pom developer id dirkv Medium Vendor pom developer id dweinr1 Medium Vendor pom developer id geirm Medium Vendor pom developer id ggregory Medium Vendor pom developer id mattsicker Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sandymac Medium Vendor pom developer id simonetripodi Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name David Weinrich Medium Vendor pom developer name Dirk Verbeeck Medium Vendor pom developer name Gary Gregory Medium Vendor pom developer name Geir Magnusson Medium Vendor pom developer name Matt Sicker Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Sandy McArthur Medium Vendor pom developer name Simone Tripodi Medium Vendor pom developer org The Apache Software Foundation Medium Vendor pom groupid org.apache.commons Highest Vendor pom name Apache Commons Pool High Vendor pom parent-artifactid commons-parent Low Vendor pom url https://commons.apache.org/proper/commons-pool/ Highest Product file name commons-pool2 High Product jar package name apache Highest Product jar package name commons Highest Product jar package name pool2 Highest Product Manifest automatic-module-name org.apache.commons.pool2 Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://commons.apache.org/proper/commons-pool/ Low Product Manifest Bundle-Name Apache Commons Pool Medium Product Manifest bundle-symbolicname org.apache.commons.commons-pool2 Medium Product Manifest implementation-build release@re855619858edd5aae1a6b49788bb7212eb77ec23; 2020-09-25 17:30:04+0000 Low Product Manifest Implementation-Title Apache Commons Pool High Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product Manifest specification-title Apache Commons Pool Medium Product pom artifactid commons-pool2 Highest Product pom developer id craigmcc Low Product pom developer id dirkv Low Product pom developer id dweinr1 Low Product pom developer id geirm Low Product pom developer id ggregory Low Product pom developer id mattsicker Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rwaldhoff Low Product pom developer id sandymac Low Product pom developer id simonetripodi Low Product pom developer name Craig McClanahan Low Product pom developer name David Weinrich Low Product pom developer name Dirk Verbeeck Low Product pom developer name Gary Gregory Low Product pom developer name Geir Magnusson Low Product pom developer name Matt Sicker Low Product pom developer name Morgan Delagrange Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Sandy McArthur Low Product pom developer name Simone Tripodi Low Product pom developer org The Apache Software Foundation Low Product pom groupid org.apache.commons Highest Product pom name Apache Commons Pool High Product pom parent-artifactid commons-parent Medium Product pom url https://commons.apache.org/proper/commons-pool/ Medium Version file version 2.9.0 High Version Manifest Bundle-Version 2.9.0 High Version Manifest Implementation-Version 2.9.0 High Version pom parent-version 2.9.0 Low Version pom version 2.9.0 Highest
Description:
config License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/com/typesafe/config/1.2.1/config-1.2.1.jar
MD5: 3aaf3c6e76a68e732c17d4a7e9877d81
SHA1: f771f71fdae3df231bcd54d5ca2d57f0bf93f467
SHA256: c160fbd78f51a0c2375a794e435ce2112524a6871f64d0331895e9e26ee8b9ee
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
config-1.2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name config High Vendor jar package name config Highest Vendor jar package name typesafe Highest Vendor Manifest bundle-symbolicname com.typesafe.config Medium Vendor pom artifactid config Highest Vendor pom artifactid config Low Vendor pom developer id havocp Medium Vendor pom developer name Havoc Pennington Medium Vendor pom groupid com.typesafe Highest Vendor pom name config High Vendor pom organization name com.typesafe High Vendor pom url typesafehub/config Highest Product file name config High Product jar package name config Highest Product jar package name typesafe Highest Product Manifest Bundle-Name com.typesafe.config Medium Product Manifest bundle-symbolicname com.typesafe.config Medium Product pom artifactid config Highest Product pom developer id havocp Low Product pom developer name Havoc Pennington Low Product pom groupid com.typesafe Highest Product pom name config High Product pom organization name com.typesafe Low Product pom url typesafehub/config High Version file version 1.2.1 High Version Manifest Bundle-Version 1.2.1 High Version pom version 1.2.1 Highest
Description:
Contains Guava's com.google.common.util.concurrent.ListenableFuture class,
without any of its other classes -- but is also available in a second
"version" that omits the class to avoid conflicts with the copy in Guava
itself. The idea is:
- If users want only ListenableFuture, they depend on listenablefuture-1.0.
- If users want all of Guava, they depend on guava, which, as of Guava
27.0, depends on
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava. The 9999.0-...
version number is enough for some build systems (notably, Gradle) to select
that empty artifact over the "real" listenablefuture-1.0 -- avoiding a
conflict with the copy of ListenableFuture in guava itself. If users are
using an older version of Guava or a build system other than Gradle, they
may see class conflicts. If so, they can solve them by manually excluding
the listenablefuture artifact or manually forcing their build systems to
use 9999.0-....
File Path: /home/runner/.m2/repository/org/apache/curator/curator-client/5.7.0/curator-client-5.7.0.jar/META-INF/maven/com.google.guava/listenablefuture/pom.xmlMD5: 7e456a5988661ce1558e9ca95397b1daSHA1: 3e71124fc28b44e29eaa31abbc267faef7ee7d40SHA256: 53873caf26bc1ed8a567ea6c939ab2aaa3f47a5e32d5cade95ddf5080d23238aReferenced In Projects/Scopes:
shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile Evidence Type Source Name Value Confidence Vendor pom artifactid listenablefuture Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava ListenableFuture only High Vendor pom parent-artifactid guava-parent Low Product pom artifactid listenablefuture Highest Product pom groupid com.google.guava Highest Product pom name Guava ListenableFuture only High Product pom parent-artifactid guava-parent Medium Version pom parent-version 1.0 Low Version pom version 1.0 Highest
Description:
Low-level API License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/curator/curator-client/5.7.0/curator-client-5.7.0.jar
MD5: fb138afa2671b23ec0afc654b7b3f308
SHA1: 690e470ffe1c4bea8149d8eca9982842a447ffc6
SHA256: 6ee4634e4dbba445e04339935543463079bb30b9e26c96938d42900b9e6a2f46
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile curator-client-5.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name curator-client High Vendor jar package name apache Highest Vendor jar package name curator Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://www.apache.org/ Low Vendor Manifest bundle-symbolicname curator-client Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid curator-client Highest Vendor pom artifactid curator-client Low Vendor pom groupid org.apache.curator Highest Vendor pom name Curator Client High Vendor pom parent-artifactid apache-curator Low Product file name curator-client High Product jar package name apache Highest Product jar package name curator Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://www.apache.org/ Low Product Manifest Bundle-Name Curator Client Medium Product Manifest bundle-symbolicname curator-client Medium Product Manifest Implementation-Title Curator Client High Product Manifest specification-title Curator Client Medium Product pom artifactid curator-client Highest Product pom groupid org.apache.curator Highest Product pom name Curator Client High Product pom parent-artifactid apache-curator Medium Version file version 5.7.0 High Version Manifest Bundle-Version 5.7.0 High Version Manifest Implementation-Version 5.7.0 High Version pom version 5.7.0 Highest
Description:
High-level API that greatly simplifies using ZooKeeper. License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/curator/curator-framework/5.7.0/curator-framework-5.7.0.jar
MD5: fb85c3cccefbe6ef4019e793795f156a
SHA1: 0b3a2c5191cb2aa609cc9bdd19701bdbd53ee627
SHA256: e1deaf49f111f116f99e591045ed274fb786102bcf1d83969c750c7da3561edb
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile curator-framework-5.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name curator-framework High Vendor jar package name apache Highest Vendor jar package name api Highest Vendor jar package name curator Highest Vendor jar package name framework Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://www.apache.org/ Low Vendor Manifest bundle-symbolicname curator-framework Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid curator-framework Highest Vendor pom artifactid curator-framework Low Vendor pom groupid org.apache.curator Highest Vendor pom name Curator Framework High Vendor pom parent-artifactid apache-curator Low Product file name curator-framework High Product jar package name apache Highest Product jar package name api Highest Product jar package name curator Highest Product jar package name framework Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://www.apache.org/ Low Product Manifest Bundle-Name Curator Framework Medium Product Manifest bundle-symbolicname curator-framework Medium Product Manifest Implementation-Title Curator Framework High Product Manifest specification-title Curator Framework Medium Product pom artifactid curator-framework Highest Product pom groupid org.apache.curator Highest Product pom name Curator Framework High Product pom parent-artifactid apache-curator Medium Version file version 5.7.0 High Version Manifest Bundle-Version 5.7.0 High Version Manifest Implementation-Version 5.7.0 High Version pom version 5.7.0 Highest
Description:
All of the recipes listed on the ZooKeeper recipes doc (except two phase commit). License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/curator/curator-recipes/5.7.0/curator-recipes-5.7.0.jar
MD5: 1f0e83c87c454c46fbd05cb363d4816c
SHA1: 6cd1b05889cc4ab8f074366dbd0493c6d3b87b6f
SHA256: 05b38dcb1604d4b2134beb9c07e7ec90f941d84f713a8c50b83db9376761a735
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile curator-recipes-5.7.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name curator-recipes High Vendor jar package name apache Highest Vendor jar package name curator Highest Vendor jar package name recipes Highest Vendor Manifest build-jdk-spec 21 Low Vendor Manifest bundle-docurl https://www.apache.org/ Low Vendor Manifest bundle-symbolicname curator-recipes Medium Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid curator-recipes Highest Vendor pom artifactid curator-recipes Low Vendor pom groupid org.apache.curator Highest Vendor pom name Curator Recipes High Vendor pom parent-artifactid apache-curator Low Product file name curator-recipes High Product jar package name apache Highest Product jar package name curator Highest Product jar package name recipes Highest Product Manifest build-jdk-spec 21 Low Product Manifest bundle-docurl https://www.apache.org/ Low Product Manifest Bundle-Name Curator Recipes Medium Product Manifest bundle-symbolicname curator-recipes Medium Product Manifest Implementation-Title Curator Recipes High Product Manifest specification-title Curator Recipes Medium Product pom artifactid curator-recipes Highest Product pom groupid org.apache.curator Highest Product pom name Curator Recipes High Product pom parent-artifactid apache-curator Medium Version file version 5.7.0 High Version Manifest Bundle-Version 5.7.0 High Version Manifest Implementation-Version 5.7.0 High Version pom version 5.7.0 Highest
Description:
Plugin providing DataNucleus implementation of the JDO API.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/datanucleus/datanucleus-api-jdo/4.2.4/datanucleus-api-jdo-4.2.4.jar
MD5: f54789e11168bdfa5063d5241573ff21
SHA1: 7e2c71f7eb9b40b660d009c3ea1b55fb71694bca
SHA256: f30f1f09658329190811468e58a622f069d97a7284d67a88b8d01c809ab3d1f3
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
datanucleus-api-jdo-4.2.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name datanucleus-api-jdo High Vendor jar package name api Highest Vendor jar package name datanucleus Highest Vendor jar package name jdo Highest Vendor Manifest bundle-symbolicname org.datanucleus.api.jdo;singleton:=true Medium Vendor pom artifactid datanucleus-api-jdo Highest Vendor pom artifactid datanucleus-api-jdo Low Vendor pom groupid org.datanucleus Highest Vendor pom name DataNucleus JDO API plugin High Vendor pom parent-artifactid datanucleus-maven-parent Low Product file name datanucleus-api-jdo High Product jar package name api Highest Product jar package name datanucleus Highest Product jar package name jdo Highest Product Manifest Bundle-Name DataNucleus JDO API plugin Medium Product Manifest bundle-symbolicname org.datanucleus.api.jdo;singleton:=true Medium Product pom artifactid datanucleus-api-jdo Highest Product pom groupid org.datanucleus Highest Product pom name DataNucleus JDO API plugin High Product pom parent-artifactid datanucleus-maven-parent Medium Version file version 4.2.4 High Version Manifest Bundle-Version 4.2.4 High Version pom parent-version 4.2.4 Low Version pom version 4.2.4 Highest
Description:
DataNucleus Core provides the primary components of a heterogenous Java persistence solution.
It supports persistence API's being layered on top of the core functionality.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/datanucleus/datanucleus-core/4.1.17/datanucleus-core-4.1.17.jar
MD5: 56845c7af1890cde68d67c39f2d0e1d3
SHA1: c03898d49b506b60849fe1db39d04ab27fa15422
SHA256: adb64b5ec1837821e289fc82b04c13f6b5a2f1c68a24628bcec6a7c43b5f5bca
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
datanucleus-core-4.1.17.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name datanucleus-core High Vendor jar package name api Highest Vendor jar package name datanucleus Highest Vendor Manifest bundle-symbolicname org.datanucleus;singleton:=true Medium Vendor pom artifactid datanucleus-core Highest Vendor pom artifactid datanucleus-core Low Vendor pom groupid org.datanucleus Highest Vendor pom name DataNucleus Core High Vendor pom parent-artifactid datanucleus-maven-parent Low Product file name datanucleus-core High Product jar package name api Highest Product jar package name datanucleus Highest Product Manifest Bundle-Name DataNucleus Core Medium Product Manifest bundle-symbolicname org.datanucleus;singleton:=true Medium Product pom artifactid datanucleus-core Highest Product pom groupid org.datanucleus Highest Product pom name DataNucleus Core High Product pom parent-artifactid datanucleus-maven-parent Medium Version file version 4.1.17 High Version Manifest Bundle-Version 4.1.17 High Version pom parent-version 4.1.17 Low Version pom version 4.1.17 Highest
Description:
Plugin for DataNucleus providing persistence to RDBMS datastores.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/datanucleus/datanucleus-rdbms/4.1.19/datanucleus-rdbms-4.1.19.jar
MD5: 7d1ad32dea1b7f5bf2d6c04e83a7bb17
SHA1: 923fa411f49cca5dbb6221140b1ae89c90b3a3fd
SHA256: a189e10fb48dc0fa550721ee2206a1df8a2fd68d213149bf68793976b0ade687
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
datanucleus-rdbms-4.1.19.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name datanucleus-rdbms High Vendor jar package name datanucleus Highest Vendor jar package name rdbms Highest Vendor jar package name store Highest Vendor Manifest bundle-symbolicname org.datanucleus.store.rdbms;singleton:=true Medium Vendor pom artifactid datanucleus-rdbms Highest Vendor pom artifactid datanucleus-rdbms Low Vendor pom groupid org.datanucleus Highest Vendor pom name DataNucleus RDBMS plugin High Vendor pom parent-artifactid datanucleus-maven-parent Low Product file name datanucleus-rdbms High Product jar package name datanucleus Highest Product jar package name rdbms Highest Product jar package name store Highest Product Manifest Bundle-Name DataNucleus RDBMS plugin Medium Product Manifest bundle-symbolicname org.datanucleus.store.rdbms;singleton:=true Medium Product pom artifactid datanucleus-rdbms Highest Product pom groupid org.datanucleus Highest Product pom name DataNucleus RDBMS plugin High Product pom parent-artifactid datanucleus-maven-parent Medium Version file version 4.1.19 High Version Manifest Bundle-Version 4.1.19 High Version pom parent-version 4.1.19 Low Version pom version 4.1.19 Highest
Description:
Contains the core Apache Derby database engine, which also includes the embedded JDBC driver. File Path: /home/runner/.m2/repository/org/apache/derby/derby/10.14.2.0/derby-10.14.2.0.jarMD5: 3ddcc1d435344d39d0122dbc2f39a746SHA1: 7efad40ef52fbb1f08142f07a83b42d29e47d8ceSHA256: 2c40eb581e5221ab33c7c796979b49ce404e7e393357c58f7bcdb30a09efca72Referenced In Project/Scope: shardingsphere-infra-database-hive:providedderby-10.14.2.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name derby High Vendor jar package name apache Highest Vendor jar package name database Highest Vendor jar package name derby Highest Vendor jar package name jdbc Highest Vendor Manifest bundle-symbolicname derby Medium Vendor pom artifactid derby Highest Vendor pom artifactid derby Low Vendor pom groupid org.apache.derby Highest Vendor pom name Apache Derby Database Engine and Embedded JDBC Driver High Vendor pom parent-artifactid derby-project Low Vendor pom url http://db.apache.org/derby/ Highest Product file name derby High Product jar package name apache Highest Product jar package name database Highest Product jar package name derby Highest Product jar package name jdbc Highest Product Manifest Bundle-Name Apache Derby 10.14 Medium Product Manifest bundle-symbolicname derby Medium Product pom artifactid derby Highest Product pom groupid org.apache.derby Highest Product pom name Apache Derby Database Engine and Embedded JDBC Driver High Product pom parent-artifactid derby-project Medium Product pom url http://db.apache.org/derby/ Medium Version file version 10.14.2.0 High Version pom version 10.14.2.0 Highest
CVE-2022-46337 suppress
A cleverly devised username might bypass LDAP authentication checks. In
LDAP-authenticated Derby installations, this could let an attacker fill
up the disk by creating junk Derby databases. In LDAP-authenticated
Derby installations, this could also allow the attacker to execute
malware which was visible to and executable by the account which booted
the Derby server. In LDAP-protected databases which weren't also
protected by SQL GRANT/REVOKE authorization, this vulnerability could
also let an attacker view and corrupt sensitive data and run sensitive
database functions and procedures.
Mitigation:
Users should upgrade to Java 21 and Derby 10.17.1.0.
Alternatively, users who wish to remain on older Java versions should
build their own Derby distribution from one of the release families to
which the fix was backported: 10.16, 10.15, and 10.14. Those are the
releases which correspond, respectively, with Java LTS versions 17, 11,
and 8.
CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Disruptor - Concurrent Programming Framework License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/lmax/disruptor/3.3.6/disruptor-3.3.6.jar
MD5: ed59630d15765aeaede66d67669086c5
SHA1: 09bfca4ee4f691f3737b3f4f006d0c4770f178eb
SHA256: 8c5df12a17f614464ccacc9b7c4935e5f16e694b7788e714cde4b7587d5dd266
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
disruptor-3.3.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name disruptor High Vendor jar package name disruptor Highest Vendor jar package name lmax Highest Vendor Manifest bundle-docurl http://lmax-exchange.github.com/disruptor Low Vendor Manifest bundle-symbolicname com.lmax.disruptor Medium Vendor pom artifactid disruptor Highest Vendor pom artifactid disruptor Low Vendor pom developer email lmax-disruptor@googlegroups.com Low Vendor pom developer id team Medium Vendor pom developer name LMAX Disruptor Development Team Medium Vendor pom groupid com.lmax Highest Vendor pom name Disruptor Framework High Vendor pom url http://lmax-exchange.github.com/disruptor Highest Product file name disruptor High Product jar package name disruptor Highest Product jar package name lmax Highest Product Manifest bundle-docurl http://lmax-exchange.github.com/disruptor Low Product Manifest Bundle-Name Disruptor Framework Medium Product Manifest bundle-symbolicname com.lmax.disruptor Medium Product pom artifactid disruptor Highest Product pom developer email lmax-disruptor@googlegroups.com Low Product pom developer id team Low Product pom developer name LMAX Disruptor Development Team Low Product pom groupid com.lmax Highest Product pom name Disruptor Framework High Product pom url http://lmax-exchange.github.com/disruptor Medium Version file version 3.3.6 High Version Manifest Bundle-Version 3.3.6 High Version pom version 3.3.6 Highest
Description:
dnsjava is an implementation of DNS in Java. It supports all defined record types (including the DNSSEC types), and unknown types. It can be used for queries, zone transfers, and dynamic updates. It includes a cache which can be used by clients, and a minimal implementation of a server. It supports TSIG authenticated messages, partial DNSSEC verification, and EDNS0. License:
BSD 2-Clause license: http://opensource.org/licenses/BSD-2-Clause File Path: /home/runner/.m2/repository/dnsjava/dnsjava/2.1.7/dnsjava-2.1.7.jar
MD5: 11363bd58696feae207a992da2ce7a90
SHA1: 0a1ed0a251d22bf528cebfafb94c55e6f3f339cf
SHA256: 2c52a6fabd5af9331d73fc7787dafc32a56bd8019c49f89749c2eeef244e303c
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
dnsjava-2.1.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name dnsjava High Vendor jar package name cache Highest Vendor jar package name dnssec Highest Vendor jar package name record Highest Vendor jar package name tsig Highest Vendor jar package name zone Highest Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Vendor Manifest bundle-symbolicname dnsjava Medium Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor pom artifactid dnsjava Highest Vendor pom artifactid dnsjava Low Vendor pom developer id bwelling Medium Vendor pom developer name Brian Wellington Medium Vendor pom groupid dnsjava Highest Vendor pom name dnsjava High Vendor pom url http://www.dnsjava.org Highest Product file name dnsjava High Product jar package name cache Highest Product jar package name dnssec Highest Product jar package name record Highest Product jar package name tsig Highest Product jar package name zone Highest Product Manifest Bundle-Name dnsjava Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.4 Low Product Manifest bundle-symbolicname dnsjava Medium Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product pom artifactid dnsjava Highest Product pom developer id bwelling Low Product pom developer name Brian Wellington Low Product pom groupid dnsjava Highest Product pom name dnsjava High Product pom url http://www.dnsjava.org Medium Version file version 2.1.7 High Version Manifest Bundle-Version 2.1.7 High Version pom version 2.1.7 Highest
CVE-2024-25638 (OSSINDEX)suppress
dnsjava is an implementation of DNS in Java. Records in DNS replies are not checked for their relevance to the query, allowing an attacker to respond with RRs from different zones. This vulnerability is fixed in 3.6.0. CWE-345 Insufficient Verification of Data Authenticity
CVSSv3:
Base Score: HIGH (8.899999618530273) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:dnsjava:dnsjava:2.1.7:*:*:*:*:*:*:* Description:
A JDBC datasource implementation. License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/alibaba/druid/1.2.7/druid-1.2.7.jar
MD5: 56b779211eb1cc920725e8eff60e25e5
SHA1: fb899366627032a7f8cfbe39b4adca3e492229bf
SHA256: d997b8d70f155763e159b3e77b5b3ec7adcb2da00efa858d3ddd14adfcc4abf3
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
druid-1.2.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name druid High Vendor jar package name alibaba Highest Vendor jar package name druid Highest Vendor jar package name jdbc Highest Vendor Manifest implementation-build 2021-09-20 17:18:10 Low Vendor Manifest implementation-url https://github.com/alibaba/druid Low Vendor Manifest Implementation-Vendor Alibaba Group High Vendor Manifest Implementation-Vendor-Id com.alibaba Medium Vendor pom artifactid druid Highest Vendor pom artifactid druid Low Vendor pom developer email little.fierydragon@gmail.com Low Vendor pom developer email szujobs@hotmail.com Low Vendor pom developer email yakolyh@gmail.com Low Vendor pom developer id kiki Medium Vendor pom developer id wenshao Medium Vendor pom developer id yako Medium Vendor pom developer name kiki Medium Vendor pom developer name wenshao Medium Vendor pom developer name yako Medium Vendor pom groupid com.alibaba Highest Vendor pom name druid High Vendor pom organization name Alibaba Group High Vendor pom organization url http://code.alibabatech.com/ Medium Vendor pom url alibaba/druid Highest Product file name druid High Product jar package name alibaba Highest Product jar package name druid Highest Product jar package name jdbc Highest Product Manifest implementation-build 2021-09-20 17:18:10 Low Product Manifest Implementation-Title druid High Product Manifest implementation-url https://github.com/alibaba/druid Low Product pom artifactid druid Highest Product pom developer email little.fierydragon@gmail.com Low Product pom developer email szujobs@hotmail.com Low Product pom developer email yakolyh@gmail.com Low Product pom developer id kiki Low Product pom developer id wenshao Low Product pom developer id yako Low Product pom developer name kiki Low Product pom developer name wenshao Low Product pom developer name yako Low Product pom groupid com.alibaba Highest Product pom name druid High Product pom organization name Alibaba Group Low Product pom organization url http://code.alibabatech.com/ Low Product pom url alibaba/druid High Version file version 1.2.7 High Version Manifest Implementation-Version 1.2.7 High Version pom version 1.2.7 Highest
Related Dependencies seata-all-2.0.0.jar: druid.jarFile Path: /home/runner/.m2/repository/io/seata/seata-all/2.0.0/seata-all-2.0.0.jar/lib/sqlparser/druid.jar MD5: 56b779211eb1cc920725e8eff60e25e5 SHA1: fb899366627032a7f8cfbe39b4adca3e492229bf SHA256: d997b8d70f155763e159b3e77b5b3ec7adcb2da00efa858d3ddd14adfcc4abf3 pkg:maven/com.alibaba/druid@1.2.7 File Path: /home/runner/.m2/repository/com/alibaba/druid/1.2.7/druid-1.2.7.jar/support/http/resources/js/bootstrap.min.jsMD5: e90c5ecfa0f7dcfdb6b8ef8aa756acebSHA1: 17686183020cff03e19e960ac8c135c3e9652174SHA256: 354751191e20ab0c948f00065077d20313dfd68305c0a43757c68e1e8ec3d647Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
Evidence Type Source Name Value Confidence
Related Dependencies seata-all-2.0.0.jar: druid.jar: bootstrap.min.jsFile Path: /home/runner/.m2/repository/io/seata/seata-all/2.0.0/seata-all-2.0.0.jar/lib/sqlparser/druid.jar/support/http/resources/js/bootstrap.min.js MD5: e90c5ecfa0f7dcfdb6b8ef8aa756aceb SHA1: 17686183020cff03e19e960ac8c135c3e9652174 SHA256: 354751191e20ab0c948f00065077d20313dfd68305c0a43757c68e1e8ec3d647 File Path: /home/runner/.m2/repository/com/alibaba/druid/1.2.7/druid-1.2.7.jar/support/http/resources/js/common.jsMD5: cbee10319b203ff78680135869fc470cSHA1: 5c8623dd41a585c540a8fc9f3931994456bc29e4SHA256: 205dc62c4b918ec87f8392c80e45c3e4f0db754b9c9736073c70944374ef749fReferenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
Evidence Type Source Name Value Confidence
Related Dependencies seata-all-2.0.0.jar: druid.jar: common.jsFile Path: /home/runner/.m2/repository/io/seata/seata-all/2.0.0/seata-all-2.0.0.jar/lib/sqlparser/druid.jar/support/http/resources/js/common.js MD5: cbee10319b203ff78680135869fc470c SHA1: 5c8623dd41a585c540a8fc9f3931994456bc29e4 SHA256: 205dc62c4b918ec87f8392c80e45c3e4f0db754b9c9736073c70944374ef749f File Path: /home/runner/.m2/repository/com/alibaba/druid/1.2.7/druid-1.2.7.jar/support/http/resources/js/doT.jsMD5: bb0029bab77e01e80957dc8155c09ad6SHA1: d8922e15f3348769feb4d96ee14b644b90ca5f54SHA256: 81d508eb6eb011e638b8f2c67f1d12c6a1be9a0b93f8259094fdefde2c87346dReferenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
Evidence Type Source Name Value Confidence
Related Dependencies seata-all-2.0.0.jar: druid.jar: doT.jsFile Path: /home/runner/.m2/repository/io/seata/seata-all/2.0.0/seata-all-2.0.0.jar/lib/sqlparser/druid.jar/support/http/resources/js/doT.js MD5: bb0029bab77e01e80957dc8155c09ad6 SHA1: d8922e15f3348769feb4d96ee14b644b90ca5f54 SHA256: 81d508eb6eb011e638b8f2c67f1d12c6a1be9a0b93f8259094fdefde2c87346d File Path: /home/runner/.m2/repository/com/alibaba/druid/1.2.7/druid-1.2.7.jar/support/http/resources/js/jquery.min.jsMD5: ee9c098974b911b6c52ee1629c205973SHA1: 88a7d6db5329b8b93f37b230e57e3a8c2b553d60SHA256: 9c70bee817785bfd4c3df8537ff6e85079bf8123c8096b9618e9c362d904c6e0Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
Evidence Type Source Name Value Confidence
Related Dependencies seata-all-2.0.0.jar: druid.jar: jquery.min.jsFile Path: /home/runner/.m2/repository/io/seata/seata-all/2.0.0/seata-all-2.0.0.jar/lib/sqlparser/druid.jar/support/http/resources/js/jquery.min.js MD5: ee9c098974b911b6c52ee1629c205973 SHA1: 88a7d6db5329b8b93f37b230e57e3a8c2b553d60 SHA256: 9c70bee817785bfd4c3df8537ff6e85079bf8123c8096b9618e9c362d904c6e0 File Path: /home/runner/.m2/repository/com/alibaba/druid/1.2.7/druid-1.2.7.jar/support/http/resources/js/lang.jsMD5: 7bf9b7e436d26ae2f6081f85652aa9bdSHA1: afdc42f68bca3f5a1f9cc9ab1359f2c6e677b712SHA256: 01df8de92cc333298f4ec87e4e661aa075fc8fd5070632d737b5a6f3864fb9c5Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
Evidence Type Source Name Value Confidence
Related Dependencies seata-all-2.0.0.jar: druid.jar: lang.jsFile Path: /home/runner/.m2/repository/io/seata/seata-all/2.0.0/seata-all-2.0.0.jar/lib/sqlparser/druid.jar/support/http/resources/js/lang.js MD5: 7bf9b7e436d26ae2f6081f85652aa9bd SHA1: afdc42f68bca3f5a1f9cc9ab1359f2c6e677b712 SHA256: 01df8de92cc333298f4ec87e4e661aa075fc8fd5070632d737b5a6f3864fb9c5 License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/org/apache/dubbo/extensions/dubbo-filter-seata/1.0.2/dubbo-filter-seata-1.0.2.jar
MD5: 0cb3284693c20e9685f7d94b6844fce9
SHA1: 34be140001a2751b1c963ea0f90087a3ce4d7c14
SHA256: e4f65150b43f82f340e6b9883b16a69737c8feba15cd89b26d42f66a82ba0edc
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
dubbo-filter-seata-1.0.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name dubbo-filter-seata High Vendor jar package name apache Highest Vendor jar package name dubbo Highest Vendor jar package name seata Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid dubbo-filter-seata Highest Vendor pom artifactid dubbo-filter-seata Low Vendor pom groupid org.apache.dubbo.extensions Highest Vendor pom name ${project.artifactId} High Vendor pom parent-artifactid dubbo-filter-extensions Low Product file name dubbo-filter-seata High Product jar package name apache Highest Product jar package name dubbo Highest Product jar package name seata Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Implementation-Title dubbo-filter-seata High Product Manifest specification-title dubbo-filter-seata Medium Product pom artifactid dubbo-filter-seata Highest Product pom groupid org.apache.dubbo.extensions Highest Product pom name ${project.artifactId} High Product pom parent-artifactid dubbo-filter-extensions Medium Version file version 1.0.2 High Version Manifest Implementation-Version 1.0.2 High Version pom parent-version 1.0.2 Low Version pom version 1.0.2 Highest
CVE-2021-32824 suppress
Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code execution via arbitrary bean manipulation in the Telnet handler. The Dubbo main service port can be used to access a Telnet Handler which offers some basic methods to collect information about the providers and methods exposed by the service and it can even allow to shutdown the service. This endpoint is unprotected. Additionally, a provider method can be invoked using the `invoke` handler. This handler uses a safe version of FastJson to process the call arguments. However, the resulting list is later processed with `PojoUtils.realize` which can be used to instantiate arbitrary classes and invoke its setters. Even though FastJson is properly protected with a default blocklist, `PojoUtils.realize` is not, and an attacker can leverage that to achieve remote code execution. Versions 2.6.10 and 2.7.10 contain fixes for this issue. CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-24969 suppress
bypass CVE-2021-25640 > In Apache Dubbo prior to 2.6.12 and 2.7.15, the usage of parseURL method will lead to the bypass of the white host check which can cause open redirect or SSRF vulnerability. CWE-601 URL Redirection to Untrusted Site ('Open Redirect'), CWE-918 Server-Side Request Forgery (SSRF)
CVSSv2:
Base Score: MEDIUM (5.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Eclipse JDT Core Batch Compiler License:
Eclipse Public License v1.0: http://www.eclipse.org/org/documents/epl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/jdt/core/compiler/ecj/4.4.2/ecj-4.4.2.jar
MD5: ee97ab38f390547839b950bb51bf5cb5
SHA1: 71d67f5bab9465ec844596ef844f40902ae25392
SHA256: 2d6ee21554bbba012b6b0383be6e6587fa35370104e41c10a3eb47039fa3e6d1
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
ecj-4.4.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name ecj High Vendor jar package name compiler Highest Vendor jar package name core Highest Vendor jar package name eclipse Highest Vendor jar package name jdt Highest Vendor Manifest bundle-symbolicname org.eclipse.jdt.core.compiler.batch Medium Vendor pom artifactid ecj Highest Vendor pom artifactid ecj Low Vendor pom developer email ralphschaer@gmail.com Low Vendor pom developer name Ralph Schaer Medium Vendor pom groupid org.eclipse.jdt.core.compiler Highest Vendor pom name Eclipse ECJ High Vendor pom url http://www.eclipse.org/jdt/ Highest Product file name ecj High Product jar package name compiler Highest Product jar package name core Highest Product jar package name eclipse Highest Product jar package name jdt Highest Product Manifest Bundle-Name Eclipse Compiler for Java(TM) Medium Product Manifest bundle-symbolicname org.eclipse.jdt.core.compiler.batch Medium Product pom artifactid ecj Highest Product pom developer email ralphschaer@gmail.com Low Product pom developer name Ralph Schaer Low Product pom groupid org.eclipse.jdt.core.compiler Highest Product pom name Eclipse ECJ High Product pom url http://www.eclipse.org/jdt/ Medium Version file version 4.4.2 High Version pom version 4.4.2 Highest
Description:
SizeOf engine, extracted from Ehcache License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/ehcache/ehcache/3.3.1/ehcache-3.3.1.jar/META-INF/maven/org.ehcache/sizeof/pom.xml
MD5: 588370e0f47ff5c821dfb86a758404e7
SHA1: 18d4a015c7463bbec8d68a1698cf705b71cc934d
SHA256: 7900c3e04b8ed68d03f068b69fee12ca3ed649a0d3d52989d7914a44454ed6ff
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid sizeof Low Vendor pom groupid org.ehcache Highest Vendor pom name Ehcache SizeOf Engine High Vendor pom organization name Terracotta High Vendor pom organization url http://terracotta.org Medium Vendor pom url ehcache/sizeof Highest Product pom artifactid sizeof Highest Product pom groupid org.ehcache Highest Product pom name Ehcache SizeOf Engine High Product pom organization name Terracotta Low Product pom organization url http://terracotta.org Low Product pom url ehcache/sizeof High Version pom version 0.3.0 Highest
Description:
A library that offers data structures allocated off the java heap. License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/ehcache/ehcache/3.3.1/ehcache-3.3.1.jar/META-INF/maven/org.terracotta/offheap-store/pom.xml
MD5: c6aef5933a56b72c0445607005cb018d
SHA1: 015f01829902b0ffd9b6d2bbc912f37ab76b0911
SHA256: fff5ecce17a2d58251192d6739053317c342f436afca3804b21b90a6a223c34c
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid offheap-store Low Vendor pom developer email chris.dennis@terracottatech.com Low Vendor pom developer name Chris Dennis Medium Vendor pom developer org Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc. Medium Vendor pom developer org URL https://terracotta.org Medium Vendor pom groupid org.terracotta Highest Vendor pom name Terracotta Off-Heap Store High Vendor pom url Terracotta-OSS/offheap-store/ Highest Product pom artifactid offheap-store Highest Product pom developer email chris.dennis@terracottatech.com Low Product pom developer name Chris Dennis Low Product pom developer org Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc. Low Product pom developer org URL https://terracotta.org Low Product pom groupid org.terracotta Highest Product pom name Terracotta Off-Heap Store High Product pom url Terracotta-OSS/offheap-store/ High Version pom version 2.3.2 Highest
Description:
A statistics framework used inside Ehcache and the Terracotta products License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/ehcache/ehcache/3.3.1/ehcache-3.3.1.jar/META-INF/maven/org.terracotta/statistics/pom.xml
MD5: 1d7b7e61b65ea00d52d0ca9de93f74b1
SHA1: 3696214d06fbbb3b557b24e4558aff4d98fec906
SHA256: 23e9c629d82bf6ed1fb6e025ae74baf01fcb33edd067ec2f2bd576d846cdfa2c
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid statistics Low Vendor pom developer email chris.dennis@terracottatech.com Low Vendor pom developer email Chris.Schanck@terracottatech.com Low Vendor pom developer email ludovic.orban@terracottatech.com Low Vendor pom developer name Chris Dennis Medium Vendor pom developer name Chris Schanck Medium Vendor pom developer name Ludovic Orban Medium Vendor pom developer org Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc. Medium Vendor pom developer org URL https://terracotta.org Medium Vendor pom groupid org.terracotta Highest Vendor pom name Terracotta Statistics High Vendor pom url Terracotta-OSS/terracotta-management/ Highest Product pom artifactid statistics Highest Product pom developer email chris.dennis@terracottatech.com Low Product pom developer email Chris.Schanck@terracottatech.com Low Product pom developer email ludovic.orban@terracottatech.com Low Product pom developer name Chris Dennis Low Product pom developer name Chris Schanck Low Product pom developer name Ludovic Orban Low Product pom developer org Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc. Low Product pom developer org URL https://terracotta.org Low Product pom groupid org.terracotta Highest Product pom name Terracotta Statistics High Product pom url Terracotta-OSS/terracotta-management/ High Version pom version 1.4.3 Highest
Description:
End-user ehcache3 jar artifact License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/ehcache/ehcache/3.3.1/ehcache-3.3.1.jar
MD5: 2f1819f6014a2b49cded8c4095aa366d
SHA1: 8de32b5df06074d4d9ec48a0df9a9df290e2e5dd
SHA256: bb3bad2519b4fde456ca3c7f06a44235da347699fcf4cb29bc9f6a0cb09604f6
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
ehcache-3.3.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name ehcache High Vendor jar package name ehcache Highest Vendor jar package name terracotta Highest Vendor Manifest build-time 2017-03-31T05:41:11-0400 Low Vendor Manifest bundle-docurl http://ehcache.org Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname org.ehcache.ehcache Medium Vendor Manifest provider gradle Low Vendor pom artifactid ehcache Highest Vendor pom artifactid ehcache Low Vendor pom developer email tc-oss@softwareag.com Low Vendor pom developer name Terracotta Engineers Medium Vendor pom developer org Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc. Medium Vendor pom developer org URL http://ehcache.org Medium Vendor pom groupid org.ehcache Highest Vendor pom name Ehcache High Vendor pom organization name Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc. High Vendor pom organization url http://terracotta.org Medium Vendor pom url http://ehcache.org Highest Product file name ehcache High Product jar package name ehcache Highest Product jar package name terracotta Highest Product Manifest build-time 2017-03-31T05:41:11-0400 Low Product Manifest bundle-docurl http://ehcache.org Low Product Manifest Bundle-Name ehcache 3 Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname org.ehcache.ehcache Medium Product Manifest Implementation-Title ehcache High Product Manifest provider gradle Low Product pom artifactid ehcache Highest Product pom developer email tc-oss@softwareag.com Low Product pom developer name Terracotta Engineers Low Product pom developer org Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc. Low Product pom developer org URL http://ehcache.org Low Product pom groupid org.ehcache Highest Product pom name Ehcache High Product pom organization name Terracotta Inc., a wholly-owned subsidiary of Software AG USA, Inc. Low Product pom organization url http://terracotta.org Low Product pom url http://ehcache.org Medium Version file version 3.3.1 High Version Manifest Bundle-Version 3.3.1 High Version pom version 3.3.1 Highest
File Path: /home/runner/.m2/repository/org/ehcache/ehcache/3.3.1/ehcache-3.3.1.jar/org/ehcache/sizeof/impl/sizeof-agent.jarMD5: 035c34dc10dc867209b997e2e1e36a99SHA1: 3a738b513c9a2491d82d5522a20b497c574cd949SHA256: 2fcea1e144d53f7501ebeb8dd83ed500c2f31095183bf8971c244f1e5a7420b2Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name sizeof-agent High Vendor jar package name ehcache Low Vendor jar package name impl Low Vendor jar package name sizeof Low Product file name sizeof-agent High Product jar package name impl Low Product jar package name sizeof Low Product jar package name sizeofagent Low
File Path: /home/runner/.m2/repository/org/apache/shardingsphere/elasticjob/elasticjob-registry-center-zookeeper-curator/3.0.4/elasticjob-registry-center-zookeeper-curator-3.0.4.jarMD5: 3d0ecbcb86119ab3b05c17b62d50a66aSHA1: 97253eb9acebce2e02b6bfa903f41a057102b7ceSHA256: af31e723c5130c767ad60d52599da6d95a753059a7e39a40770b2892cf12adb5Referenced In Projects/Scopes:
shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-agent-logging-file:provided shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile elasticjob-registry-center-zookeeper-curator-3.0.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-schedule-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name elasticjob-registry-center-zookeeper-curator High Vendor jar package name apache Highest Vendor jar package name elasticjob Highest Vendor jar package name shardingsphere Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid elasticjob-registry-center-zookeeper-curator Highest Vendor pom artifactid elasticjob-registry-center-zookeeper-curator Low Vendor pom groupid org.apache.shardingsphere.elasticjob Highest Vendor pom name ${project.artifactId} High Vendor pom parent-artifactid elasticjob-regitry-center-provider Low Product file name elasticjob-registry-center-zookeeper-curator High Product jar package name apache Highest Product jar package name elasticjob Highest Product jar package name shardingsphere Highest Product Manifest build-jdk-spec 11 Low Product Manifest Implementation-Title elasticjob-registry-center-zookeeper-curator High Product Manifest specification-title elasticjob-registry-center-zookeeper-curator Medium Product pom artifactid elasticjob-registry-center-zookeeper-curator Highest Product pom groupid org.apache.shardingsphere.elasticjob Highest Product pom name ${project.artifactId} High Product pom parent-artifactid elasticjob-regitry-center-provider Medium Version file version 3.0.4 High Version Manifest Implementation-Version 3.0.4 High Version pom version 3.0.4 Highest
CVE-2022-45347 suppress
Apache ShardingSphere-Proxy prior to 5.3.0 when using MySQL as database backend didn't cleanup the database session completely after client authentication failed, which allowed an attacker to execute normal commands by constructing a special MySQL client. This vulnerability has been fixed in Apache ShardingSphere 5.3.0. CWE-459 Incomplete Cleanup
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2023-44981 suppress
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper (quorum.auth.enableSasl=true), the authorization is done by verifying that the instance part in SASL authentication ID is listed in zoo.cfg server list. The instance part in SASL auth ID is optional and if it's missing, like 'eve@EXAMPLE.COM', the authorization check will be skipped. As a result an arbitrary endpoint could join the cluster and begin propagating counterfeit changes to the leader, essentially giving it complete read-write access to the data tree. Quorum Peer authentication is not enabled by default.
Users are recommended to upgrade to version 3.9.1, 3.8.3, 3.7.2, which fixes the issue.
Alternately ensure the ensemble election/quorum communication is protected by a firewall as this will mitigate the issue.
See the documentation for more details on correct cluster administration.
CWE-639 Authorization Bypass Through User-Controlled Key
CVSSv3:
Base Score: CRITICAL (9.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-28754 suppress
Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent, which allows attackers to execute arbitrary code by constructing a special YAML configuration file.
The attacker needs to have permission to modify the ShardingSphere Agent YAML configuration file on the target machine, and the target machine can access the URL with the arbitrary code JAR.
An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize javax.script.ScriptEngineManager to load code using that ClassLoader. When the ShardingSphere JVM process starts and uses the ShardingSphere-Agent, the arbitrary code specified by the attacker will be executed during the deserialization of the YAML configuration file by the Agent.
This issue affects ShardingSphere-Agent: through 5.3.2. This vulnerability is fixed in Apache ShardingSphere 5.4.0. CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2016-5017 suppress
Buffer overflow in the C cli shell in Apache Zookeeper before 3.4.9 and 3.5.x before 3.5.3, when using the "cmd:" batch mode syntax, allows attackers to have unspecified impact via a long command string. CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-8012 suppress
No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta. As a result an arbitrary end point could join the cluster and begin propagating counterfeit changes to the leader. CWE-862 Missing Authorization
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-0201 suppress
An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta. ZooKeeper’s getACL() command doesn’t check any permission when retrieves the ACLs of the requested node and returns all information contained in the ACL Id field as plaintext string. DigestAuthenticationProvider overloads the Id field with the hash value that is used for user authentication. As a consequence, if Digest Authentication is in use, the unsalted hash value will be disclosed by getACL() request for unauthenticated or unprivileged users. CWE-862 Missing Authorization
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Fault tolerance and resilience patterns License:
http://apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/dev/failsafe/failsafe/3.3.2/failsafe-3.3.2.jar
MD5: 484218fc76b81fff7ad7378a77ca6231
SHA1: 738a986f1f0e4b6c6a49d351dddc772d1378c5a8
SHA256: 2c5dc879a6dac7ea3a7b29d795e27bd49b8e7908b05c2f3e56053c19d79850f5
Referenced In Projects/Scopes: shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-cluster-mode-repository-etcd:compile shardingsphere-jdbc-distribution:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile failsafe-3.3.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/io.etcd/jetcd-core@0.7.7 pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name failsafe High Vendor jar package name dev Highest Vendor jar package name failsafe Highest Vendor Manifest automatic-module-name dev.failsafe Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-symbolicname dev.failsafe Medium Vendor Manifest multi-release true Low Vendor pom artifactid failsafe Highest Vendor pom artifactid failsafe Low Vendor pom groupid dev.failsafe Highest Vendor pom name Failsafe High Vendor pom parent-artifactid failsafe-parent Low Product file name failsafe High Product jar package name dev Highest Product jar package name failsafe Highest Product Manifest automatic-module-name dev.failsafe Medium Product Manifest build-jdk-spec 11 Low Product Manifest Bundle-Name Failsafe Medium Product Manifest bundle-symbolicname dev.failsafe Medium Product Manifest Implementation-Title Fault tolerance and resilience patterns High Product Manifest multi-release true Low Product pom artifactid failsafe Highest Product pom groupid dev.failsafe Highest Product pom name Failsafe High Product pom parent-artifactid failsafe-parent Medium Version file version 3.3.2 High Version Manifest Bundle-Version 3.3.2 High Version Manifest Implementation-Version 3.3.2 High Version pom version 3.3.2 Highest
Description:
Fastjson is a JSON processor (JSON parser + JSON generator) written in Java License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/alibaba/fastjson/1.2.83/fastjson-1.2.83.jar
MD5: ec12f33fe03e6ec07fdd9bc7a0624074
SHA1: 9ee94951bc107d382519975d04bc950b6c6ab297
SHA256: 641a4d65ab32fbfdccd9c718e3f83ebc4caabdb5e4fe5b3d51527c5fe692631d
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
fastjson-1.2.83.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name fastjson High Vendor jar package name alibaba Highest Vendor jar package name alibaba Low Vendor jar package name fastjson Highest Vendor jar package name fastjson Low Vendor jar package name parser Highest Vendor pom artifactid fastjson Highest Vendor pom artifactid fastjson Low Vendor pom developer email 654815312@qq.com Low Vendor pom developer email 89921218@qq.com Low Vendor pom developer email email_dsl@163.com Low Vendor pom developer email iamaxman@hotmail.com Low Vendor pom developer email kimmking@163.com Low Vendor pom developer email szujobs@hotmail.com Low Vendor pom developer email Victor.Zxy@outlook.com Low Vendor pom developer id axmanwang Medium Vendor pom developer id kimmking Medium Vendor pom developer id Neil Dong Medium Vendor pom developer id Omega-Ariston Medium Vendor pom developer id Victor Zeng Medium Vendor pom developer id wenshao Medium Vendor pom developer name axmanwang Medium Vendor pom developer name Jiechuan Chen Medium Vendor pom developer name kimmking Medium Vendor pom developer name Neil Dong Medium Vendor pom developer name Victor Zeng Medium Vendor pom developer name wenshao Medium Vendor pom developer name 李恒名 Medium Vendor pom groupid com.alibaba Highest Vendor pom name fastjson High Vendor pom organization name Alibaba Group High Vendor pom organization url alibaba Medium Vendor pom url alibaba/fastjson Highest Product file name fastjson High Product jar package name alibaba Highest Product jar package name fastjson Highest Product jar package name fastjson Low Product jar package name parser Highest Product pom artifactid fastjson Highest Product pom developer email 654815312@qq.com Low Product pom developer email 89921218@qq.com Low Product pom developer email email_dsl@163.com Low Product pom developer email iamaxman@hotmail.com Low Product pom developer email kimmking@163.com Low Product pom developer email szujobs@hotmail.com Low Product pom developer email Victor.Zxy@outlook.com Low Product pom developer id axmanwang Low Product pom developer id kimmking Low Product pom developer id Neil Dong Low Product pom developer id Omega-Ariston Low Product pom developer id Victor Zeng Low Product pom developer id wenshao Low Product pom developer name axmanwang Low Product pom developer name Jiechuan Chen Low Product pom developer name kimmking Low Product pom developer name Neil Dong Low Product pom developer name Victor Zeng Low Product pom developer name wenshao Low Product pom developer name 李恒名 Low Product pom groupid com.alibaba Highest Product pom name fastjson High Product pom organization name Alibaba Group Low Product pom url alibaba High Product pom url alibaba/fastjson High Version file version 1.2.83 High Version pom version 1.2.83 Highest
Description:
A clean room implementation of the Findbugs Annotations based entirely on the specification provided
by the javadocs and at http://findbugs.sourceforge.net/manual/annotations.html.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/github/stephenc/findbugs/findbugs-annotations/1.3.9-1/findbugs-annotations-1.3.9-1.jar
MD5: 70fda5202eb9d9ce4f250f2c2ba71152
SHA1: a6b11447635d80757d64b355bed3c00786d86801
SHA256: 1e651066ed9ae35d7e3001d635d1dbba1c2965db0e4e33e2c14ad610543f225c
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
findbugs-annotations-1.3.9-1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name findbugs-annotations High Vendor jar package name cs Low Vendor jar package name edu Low Vendor jar package name findbugs Highest Vendor jar package name umd Low Vendor pom artifactid findbugs-annotations Highest Vendor pom artifactid findbugs-annotations Low Vendor pom developer id stephenc Medium Vendor pom developer name Stephen Connolly Medium Vendor pom groupid com.github.stephenc.findbugs Highest Vendor pom name Findbugs Annotations under Apache License High Vendor pom url http://stephenc.github.com/findbugs-annotations Highest Product file name findbugs-annotations High Product jar package name cs Low Product jar package name findbugs Highest Product jar package name findbugs Low Product jar package name umd Low Product pom artifactid findbugs-annotations Highest Product pom developer id stephenc Low Product pom developer name Stephen Connolly Low Product pom groupid com.github.stephenc.findbugs Highest Product pom name Findbugs Annotations under Apache License High Product pom url http://stephenc.github.com/findbugs-annotations Medium Version pom version 1.3.9-1 Highest
Description:
FreeMarker is a "template engine"; a generic tool to generate text output based on templates.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/freemarker/freemarker/2.3.31/freemarker-2.3.31.jar
MD5: 962b1ff657a58cb26a9bbccb2a84d2bd
SHA1: cd4fc0942b4a8bdb19f3b669aa42136fb54feb55
SHA256: 68ecb4c5aa4934b7b50c38b0e495d7589e52dfb9d28b964ac2008b72090bfaae
Referenced In Projects/Scopes: shardingsphere-proxy-backend-opengauss:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile freemarker-2.3.31.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name freemarker High Vendor jar package name freemarker Highest Vendor jar package name template Highest Vendor Manifest automatic-module-name freemarker Medium Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8, JavaSE-1.7 Low Vendor Manifest bundle-symbolicname org.freemarker.freemarker Medium Vendor Manifest extension-name FreeMarker Medium Vendor Manifest Implementation-Vendor freemarker.org High Vendor Manifest specification-vendor freemarker.org Low Vendor pom artifactid freemarker Highest Vendor pom artifactid freemarker Low Vendor pom groupid org.freemarker Highest Vendor pom name Apache FreeMarker High Vendor pom organization name Apache Software Foundation High Vendor pom organization url http://apache.org Medium Vendor pom parent-artifactid apache Low Vendor pom parent-groupid org.apache Medium Vendor pom url https://freemarker.apache.org/ Highest Product file name freemarker High Product jar package name freemarker Highest Product jar package name template Highest Product Manifest automatic-module-name freemarker Medium Product Manifest Bundle-Name org.freemarker.freemarker Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8, JavaSE-1.7 Low Product Manifest bundle-symbolicname org.freemarker.freemarker Medium Product Manifest extension-name FreeMarker Medium Product Manifest Implementation-Title FreeMarker High Product Manifest specification-title FreeMarker Medium Product pom artifactid freemarker Highest Product pom groupid org.freemarker Highest Product pom name Apache FreeMarker High Product pom organization name Apache Software Foundation Low Product pom organization url http://apache.org Low Product pom parent-artifactid apache Medium Product pom parent-groupid org.apache Medium Product pom url https://freemarker.apache.org/ Medium Version file version 2.3.31 High Version Manifest Implementation-Version 2.3.31 High Version pom parent-version 2.3.31 Low Version pom version 2.3.31 Highest
Description:
Apache Geronimo implementation of the JSR-107 License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/geronimo/specs/geronimo-jcache_1.0_spec/1.0-alpha-1/geronimo-jcache_1.0_spec-1.0-alpha-1.jar
MD5: 4bd6a8a41e2c31feda43e39604e514dd
SHA1: ef92fbbc3a3a7f45bf021bcb75df2c6e0660dfac
SHA256: 0070a12e58f491b95719391325299a6294530ee6c3ce25e50bdc98b0b700966c
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
geronimo-jcache_1.0_spec-1.0-alpha-1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name geronimo-jcache_1.0_spec-1.0-alpha-1 High Vendor Manifest bundle-docurl http://geronimo.apache.org/maven/specs/geronimo-jcache_1.0_spec/1.0-alpha-1 Low Vendor Manifest bundle-symbolicname org.apache.geronimo.specs.geronimo-jcache_1.0_spec Medium Vendor pom artifactid geronimo-jcache_1.0_spec Highest Vendor pom artifactid geronimo-jcache_1.0_spec Low Vendor pom groupid org.apache.geronimo.specs Highest Vendor pom name Apache Geronimo JCache Spec 1.0 High Vendor pom parent-artifactid genesis-java5-flava Low Vendor pom parent-groupid org.apache.geronimo.genesis Medium Vendor pom url http://geronimo.apache.org/maven/${siteId}/${project.version} Highest Vendor pom url http://geronimo.apache.org/maven// Highest Product file name geronimo-jcache_1.0_spec-1.0-alpha-1 High Product Manifest bundle-docurl http://geronimo.apache.org/maven/specs/geronimo-jcache_1.0_spec/1.0-alpha-1 Low Product Manifest Bundle-Name Apache Geronimo JCache Spec 1.0 Medium Product Manifest bundle-symbolicname org.apache.geronimo.specs.geronimo-jcache_1.0_spec Medium Product Manifest Implementation-Title Apache Geronimo JCache Spec 1.0 High Product pom artifactid geronimo-jcache_1.0_spec Highest Product pom groupid org.apache.geronimo.specs Highest Product pom name Apache Geronimo JCache Spec 1.0 High Product pom parent-artifactid genesis-java5-flava Medium Product pom parent-groupid org.apache.geronimo.genesis Medium Product pom url http://geronimo.apache.org/maven/${siteId}/${project.version} Medium Product pom url http://geronimo.apache.org/maven// Medium Version Manifest Implementation-Version 1.0-alpha-1 High Version pom parent-version 1.0-alpha-1 Low Version pom version 1.0-alpha-1 Highest
Description:
gRPC: Core License:
Apache 2.0: https://opensource.org/licenses/Apache-2.0 File Path: /home/runner/.m2/repository/io/grpc/grpc-core/1.65.1/grpc-core-1.65.1.jar
MD5: e7ee23633c0b3091cc42a1a3bd7b3c33
SHA1: 7b80ccb2678b7d3ff2ec90bbe4ffbb0ff956eb54
SHA256: 590d19ad387b5f288477fc4c5bc5be9adf4ac4eab51cb69e8b3211286127c061
Referenced In Projects/Scopes: shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-cluster-mode-repository-etcd:compile shardingsphere-jdbc-distribution:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile grpc-core-1.65.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/io.etcd/jetcd-core@0.7.7 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name grpc-core High Vendor jar package name grpc Highest Vendor jar package name internal Highest Vendor jar package name io Highest Vendor Manifest automatic-module-name io.grpc.internal Medium Vendor pom artifactid grpc-core Highest Vendor pom artifactid grpc-core Low Vendor pom developer email grpc-io@googlegroups.com Low Vendor pom developer id grpc.io Medium Vendor pom developer name gRPC Contributors Medium Vendor pom developer org gRPC Authors Medium Vendor pom developer org URL https://www.google.com Medium Vendor pom groupid io.grpc Highest Vendor pom name io.grpc:grpc-core High Vendor pom url grpc/grpc-java Highest Product file name grpc-core High Product jar package name grpc Highest Product jar package name internal Highest Product jar package name io Highest Product Manifest automatic-module-name io.grpc.internal Medium Product Manifest Implementation-Title jar High Product pom artifactid grpc-core Highest Product pom developer email grpc-io@googlegroups.com Low Product pom developer id grpc.io Low Product pom developer name gRPC Contributors Low Product pom developer org gRPC Authors Low Product pom developer org URL https://www.google.com Low Product pom groupid io.grpc Highest Product pom name io.grpc:grpc-core High Product pom url grpc/grpc-java High Version file version 1.65.1 High Version Manifest Implementation-Version 1.65.1 High Version pom version 1.65.1 Highest
Related Dependencies grpc-api-1.65.1.jarFile Path: /home/runner/.m2/repository/io/grpc/grpc-api/1.65.1/grpc-api-1.65.1.jar MD5: 6284039ddd205419a594cba967637871 SHA1: 052a4193296c4471871b90dbbdaebb8e9bb87182 SHA256: 4fb6a4b2ed3744bd95c495fea42d9c6b8d4b6c26dd562376d5c62ec28d5db64f pkg:maven/io.grpc/grpc-api@1.65.1 grpc-context-1.65.1.jarFile Path: /home/runner/.m2/repository/io/grpc/grpc-context/1.65.1/grpc-context-1.65.1.jar MD5: 25684b9bdc1768615654a96fd4bb1b68 SHA1: d65b37d9523f5ad0c8eda4cbf999fed4b933a594 SHA256: 1e8d6da14486585451f061a47d2e2435ec45506deb809b5029ccab9d4842c6ff pkg:maven/io.grpc/grpc-context@1.65.1 grpc-grpclb-1.65.1.jarFile Path: /home/runner/.m2/repository/io/grpc/grpc-grpclb/1.65.1/grpc-grpclb-1.65.1.jar MD5: 8f44e8f45f4cabf9c64a005c3a0fa9ea SHA1: daa916d2d605d2bacbb1ecb047ebb12e6fd6d2f2 SHA256: 12119ec87ee25499ceef90e1a338d8cd47c3be6d2c0e3ed3ea1793ccb4cf5f4e pkg:maven/io.grpc/grpc-grpclb@1.65.1 grpc-netty-1.65.1.jarFile Path: /home/runner/.m2/repository/io/grpc/grpc-netty/1.65.1/grpc-netty-1.65.1.jar MD5: 260db2176242253bc33eb15d9e27d082 SHA1: 048f24fbe5d26affe44b916461d62dcc9f34f8da SHA256: 86b0a76c7283c7dfe47153f1b27f9ad6580a3ea8ab82276aa5e32d6a62487ae6 pkg:maven/io.grpc/grpc-netty@1.65.1 grpc-stub-1.65.1.jarFile Path: /home/runner/.m2/repository/io/grpc/grpc-stub/1.65.1/grpc-stub-1.65.1.jar MD5: 7dcc5aaac9ac8f30ef9414cc855603eb SHA1: 52f605e45be9c43079d8c8a6bc7142cab662ac62 SHA256: 2df07043e03ae03e06bca49fd9a55702adeaafb3bcec3068a8f6179efa68c9e1 pkg:maven/io.grpc/grpc-stub@1.65.1 grpc-util-1.65.1.jarFile Path: /home/runner/.m2/repository/io/grpc/grpc-util/1.65.1/grpc-util-1.65.1.jar MD5: c02d760586706817597eea6366fafe9c SHA1: 54121cb0fd19af2f0e93321a5dc78d283ecefef8 SHA256: 7d2c4866515c6101598dd0c3d2e955707fb1126e51fd0eeb06daa98837f8dfbc pkg:maven/io.grpc/grpc-util@1.65.1 Description:
gRPC: Protobuf License:
Apache 2.0: https://opensource.org/licenses/Apache-2.0 File Path: /home/runner/.m2/repository/io/grpc/grpc-protobuf/1.65.1/grpc-protobuf-1.65.1.jar
MD5: 7e3dde7661cb221a815c000ea5266ef9
SHA1: 007e25214bd216bbf5c4f2092a984b6586759124
SHA256: dd5b390240b98daf040f28319711e964a810d7e7c200eb15d3525de51c927350
Referenced In Projects/Scopes: shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-cluster-mode-repository-etcd:compile shardingsphere-jdbc-distribution:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile grpc-protobuf-1.65.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/io.etcd/jetcd-core@0.7.7 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name grpc-protobuf High Vendor jar package name grpc Highest Vendor jar package name io Highest Vendor jar package name protobuf Highest Vendor Manifest automatic-module-name io.grpc.protobuf Medium Vendor pom artifactid grpc-protobuf Highest Vendor pom artifactid grpc-protobuf Low Vendor pom developer email grpc-io@googlegroups.com Low Vendor pom developer id grpc.io Medium Vendor pom developer name gRPC Contributors Medium Vendor pom developer org gRPC Authors Medium Vendor pom developer org URL https://www.google.com Medium Vendor pom groupid io.grpc Highest Vendor pom name io.grpc:grpc-protobuf High Vendor pom url grpc/grpc-java Highest Product file name grpc-protobuf High Product jar package name grpc Highest Product jar package name io Highest Product jar package name protobuf Highest Product Manifest automatic-module-name io.grpc.protobuf Medium Product Manifest Implementation-Title jar High Product pom artifactid grpc-protobuf Highest Product pom developer email grpc-io@googlegroups.com Low Product pom developer id grpc.io Low Product pom developer name gRPC Contributors Low Product pom developer org gRPC Authors Low Product pom developer org URL https://www.google.com Low Product pom groupid io.grpc Highest Product pom name io.grpc:grpc-protobuf High Product pom url grpc/grpc-java High Version file version 1.65.1 High Version Manifest Implementation-Version 1.65.1 High Version pom version 1.65.1 Highest
Related Dependencies grpc-protobuf-lite-1.65.1.jarFile Path: /home/runner/.m2/repository/io/grpc/grpc-protobuf-lite/1.65.1/grpc-protobuf-lite-1.65.1.jar MD5: cbd25b07a68c3a9527d9c87f531d32b9 SHA1: f9427f4e41726d7510dc3b721cac62535eb6949c SHA256: 0debee5af442761318309bb24377c512c2228123396f9f4aafd36f1d198af4b2 pkg:maven/io.grpc/grpc-protobuf-lite@1.65.1 Description:
Gson JSON library License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/google/code/gson/gson/2.10.1/gson-2.10.1.jar
MD5: df6097815738cb31fc56391553210843
SHA1: b3add478d4382b78ea20b1671390a858002feb6c
SHA256: 4241c14a7727c34feea6507ec801318a3d4a90f070e4525681079fb94ee4c593
Referenced In Projects/Scopes: shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-data-pipeline-cdc-protocol:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-global-clock-tso-provider-redis:provided shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-data-pipeline-cdc-client:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile gson-2.10.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-client@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/com.google.protobuf/protobuf-java-util@3.21.12 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/redis.clients/jedis@4.4.6 pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-schedule-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-protocol@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 Evidence Type Source Name Value Confidence Vendor file name gson High Vendor jar package name google Highest Vendor jar package name gson Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-contactaddress https://github.com/google/gson Low Vendor Manifest bundle-developers google;organization=Google;organizationUrl="https://www.google.com" Low Vendor Manifest bundle-docurl https://github.com/google/gson/gson Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.7, JavaSE-1.8 Low Vendor Manifest bundle-symbolicname com.google.gson Medium Vendor Manifest multi-release true Low Vendor pom artifactid gson Highest Vendor pom artifactid gson Low Vendor pom groupid com.google.code.gson Highest Vendor pom name Gson High Vendor pom parent-artifactid gson-parent Low Product file name gson High Product jar package name google Highest Product jar package name gson Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-contactaddress https://github.com/google/gson Low Product Manifest bundle-developers google;organization=Google;organizationUrl="https://www.google.com" Low Product Manifest bundle-docurl https://github.com/google/gson/gson Low Product Manifest Bundle-Name Gson Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.7, JavaSE-1.8 Low Product Manifest bundle-symbolicname com.google.gson Medium Product Manifest multi-release true Low Product pom artifactid gson Highest Product pom groupid com.google.code.gson Highest Product pom name Gson High Product pom parent-artifactid gson-parent Medium Version file version 2.10.1 High Version Manifest Bundle-Version 2.10.1 High Version pom version 2.10.1 Highest
Description:
Guice is a lightweight dependency injection framework for Java 6 and above License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/google/inject/guice/4.0/guice-4.0.jar
MD5: 969e114e22733923ba147331dd779ed5
SHA1: 0f990a43d3725781b6db7cd0acf0a8b62dfd1649
SHA256: b378ffc35e7f7125b3c5f3a461d4591ae1685e3c781392f0c854ed7b7581d6d2
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
guice-4.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name guice High Vendor jar package name google Highest Vendor jar package name guice Highest Vendor jar package name inject Highest Vendor Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Vendor Manifest bundle-docurl https://github.com/google/guice Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.google.inject Medium Vendor Manifest eclipse-extensibleapi true Low Vendor pom artifactid guice Highest Vendor pom artifactid guice Low Vendor pom groupid com.google.inject Highest Vendor pom name Google Guice - Core Library High Vendor pom parent-artifactid guice-parent Low Product file name guice High Product jar package name dependency Highest Product jar package name google Highest Product jar package name guice Highest Product jar package name inject Highest Product Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product Manifest bundle-docurl https://github.com/google/guice Low Product Manifest Bundle-Name guice Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.google.inject Medium Product Manifest eclipse-extensibleapi true Low Product pom artifactid guice Highest Product pom groupid com.google.inject Highest Product pom name Google Guice - Core Library High Product pom parent-artifactid guice-parent Medium Version file version 4.0 High Version pom version 4.0 Highest
Description:
Guice is a lightweight dependency injection framework for Java 6 and above License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/google/inject/extensions/guice-servlet/4.0/guice-servlet-4.0.jar
MD5: b6f771dfeb63ceeb123175a1229df809
SHA1: 4503da866f4c402b5090579b40c1c4aaefabb164
SHA256: 651e18a98af376ac0717d22ddc89863dbc0c7512e28340a6642a8612ab82b15d
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
guice-servlet-4.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name guice-servlet High Vendor jar package name google Highest Vendor jar package name inject Highest Vendor jar package name servlet Highest Vendor Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Vendor Manifest bundle-docurl https://github.com/google/guice Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.google.inject.servlet Medium Vendor pom artifactid guice-servlet Highest Vendor pom artifactid guice-servlet Low Vendor pom groupid com.google.inject.extensions Highest Vendor pom name Google Guice - Extensions - Servlet High Vendor pom parent-artifactid extensions-parent Low Product file name guice-servlet High Product jar package name google Highest Product jar package name inject Highest Product jar package name servlet Highest Product Manifest bundle-copyright Copyright (C) 2006 Google Inc. Low Product Manifest bundle-docurl https://github.com/google/guice Low Product Manifest Bundle-Name guice-servlet Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.google.inject.servlet Medium Product pom artifactid guice-servlet Highest Product pom groupid com.google.inject.extensions Highest Product pom name Google Guice - Extensions - Servlet High Product pom parent-artifactid extensions-parent Medium Version file version 4.0 High Version pom version 4.0 Highest
Description:
H2 Database Engine License:
MPL 2.0: https://www.mozilla.org/en-US/MPL/2.0/
EPL 1.0: https://opensource.org/licenses/eclipse-1.0.php File Path: /home/runner/.m2/repository/com/h2database/h2/2.2.224/h2-2.2.224.jar
MD5: 769d5a85d19ccc2b06620f8c81d6d8f8
SHA1: 7bdade27d8cd197d9b5ce9dc251f41d2edc5f7ad
SHA256: b9d8f19358ada82a4f6eb5b174c6cfe320a375b5a9cb5a4fe456d623e6e55497
Referenced In Projects/Scopes: shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-proxy-bootstrap:runtime shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-standalone-mode-repository-jdbc:runtime shardingsphere-proxy-distribution:runtime shardingsphere-jdbc:runtime h2-2.2.224.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name h2 High Vendor jar package name database Highest Vendor jar package name engine Highest Vendor jar package name h2 Highest Vendor Manifest automatic-module-name com.h2database Medium Vendor Manifest bundle-category jdbc Low Vendor Manifest bundle-symbolicname com.h2database Medium Vendor Manifest implementation-url https://h2database.com Low Vendor Manifest multi-release true Low Vendor Manifest provide-capability osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory Low Vendor pom artifactid h2 Highest Vendor pom artifactid h2 Low Vendor pom developer email thomas.tom.mueller at gmail dot com Low Vendor pom developer id thomas.tom.mueller Medium Vendor pom developer name Thomas Mueller Medium Vendor pom groupid com.h2database Highest Vendor pom name H2 Database Engine High Vendor pom url https://h2database.com Highest Product file name h2 High Product jar package name database Highest Product jar package name engine Highest Product jar package name h2 Highest Product jar package name jdbc Highest Product jar package name org Highest Product jar package name service Highest Product Manifest automatic-module-name com.h2database Medium Product Manifest bundle-category jdbc Low Product Manifest Bundle-Name H2 Database Engine Medium Product Manifest bundle-symbolicname com.h2database Medium Product Manifest Implementation-Title H2 Database Engine High Product Manifest implementation-url https://h2database.com Low Product Manifest multi-release true Low Product Manifest provide-capability osgi.service;objectClass:List=org.osgi.service.jdbc.DataSourceFactory Low Product pom artifactid h2 Highest Product pom developer email thomas.tom.mueller at gmail dot com Low Product pom developer id thomas.tom.mueller Low Product pom developer name Thomas Mueller Low Product pom groupid com.h2database Highest Product pom name H2 Database Engine High Product pom url https://h2database.com Medium Version file version 2.2.224 High Version Manifest Bundle-Version 2.2.224 High Version Manifest Implementation-Version 2.2.224 High Version pom version 2.2.224 Highest
CVE-2018-14335 (OSSINDEX)suppress
h2database - Improper Link Resolution Before File Access
The software attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. CWE-59 Improper Link Resolution Before File Access ('Link Following')
CVSSv3:
Base Score: MEDIUM (6.0) Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:com.h2database:h2:2.2.224:*:*:*:*:*:*:* File Path: /home/runner/.m2/repository/com/h2database/h2/2.2.224/h2-2.2.224.jar/org/h2/util/data.zip/org/h2/server/web/res/table.jsMD5: f374e067dff4b106b77abab77b360d8bSHA1: 67d0af73251e86e079f1db4b837920309a1a3993SHA256: 75e452b34b317d0a8c630b9ac469db3d82988e221d41adc17cf1bab3c0e88c78Referenced In Projects/Scopes:
shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-proxy-bootstrap:runtime shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-standalone-mode-repository-jdbc:runtime shardingsphere-proxy-distribution:runtime shardingsphere-jdbc:runtime Evidence Type Source Name Value Confidence
File Path: /home/runner/.m2/repository/com/h2database/h2/2.2.224/h2-2.2.224.jar/org/h2/util/data.zip/org/h2/server/web/res/tree.jsMD5: 760f137680a67ae829c2000c4156e050SHA1: d947ebba0777d68aa9397fc7d8b04ce2a725c12bSHA256: 2bb3d968d50a5d96912f77552d772184d0213e2601895517ba53afa64dc433edReferenced In Projects/Scopes:
shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-proxy-bootstrap:runtime shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-standalone-mode-repository-jdbc:runtime shardingsphere-proxy-distribution:runtime shardingsphere-jdbc:runtime Evidence Type Source Name Value Confidence
Description:
Apache Hadoop Common File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-common/3.1.0/hadoop-common-3.1.0.jarMD5: ed92623474f74c0ce093753a90d108adSHA1: c0fe6f7cd9fd96e227f7d71f6a966cf650b5b5aaSHA256: ffd6cf2775b7df69436a02f3f8823139994deca16ec273e067c498805da72a62Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhadoop-common-3.1.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hadoop-common High Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name hadoop Highest Vendor jar package name hadoop Low Vendor pom artifactid hadoop-common Highest Vendor pom artifactid hadoop-common Low Vendor pom groupid org.apache.hadoop Highest Vendor pom name Apache Hadoop Common High Vendor pom parent-artifactid hadoop-project-dist Low Product file name hadoop-common High Product jar package name apache Highest Product jar package name hadoop Highest Product jar package name hadoop Low Product pom artifactid hadoop-common Highest Product pom groupid org.apache.hadoop Highest Product pom name Apache Hadoop Common High Product pom parent-artifactid hadoop-project-dist Medium Version file version 3.1.0 High Version pom version 3.1.0 Highest
CVE-2021-37404 suppress
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. CWE-787 Out-of-bounds Write
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-25168 suppress
Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An attacker can inject arbitrary commands. This is only used in Hadoop 3.3 InMemoryAliasMap.completeBootstrapTransfer, which is only ever run by a local user. It has been used in Hadoop 2.x for yarn localization, which does enable remote code execution. It is used in Apache Spark, from the SQL command ADD ARCHIVE. As the ADD ARCHIVE command adds new binaries to the classpath, being able to execute shell scripts does not confer new permissions to the caller. SPARK-38305. "Check existence of file before untarring/zipping", which is included in 3.3.0, 3.1.4, 3.2.2, prevents shell commands being executed, regardless of which version of the hadoop libraries are in use. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.3 or upper (including HADOOP-18136). CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-26612 suppress
In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn't resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3 CWE-59 Improper Link Resolution Before File Access ('Link Following')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-8009 suppress
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-8029 suppress
In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. NVD-CWE-noinfo
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-9492 suppress
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-25642 suppress
ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used. CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-33036 suppress
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. CWE-24 Path Traversal: '../filedir', CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-264 Permissions, Privileges, and Access Controls
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-11768 suppress
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage. CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-11767 (OSSINDEX)suppress
In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2018-11767 for details CWE-269 Improper Privilege Management
CVSSv3:
Base Score: HIGH (7.400000095367432) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.apache.hadoop:hadoop-common:3.1.0:*:*:*:*:*:*:* File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-mapreduce-client-core/2.7.1/hadoop-mapreduce-client-core-2.7.1.jarMD5: 069f25d2ef1ce6d2fa4a343fe4299f01SHA1: de969defb8b8d788481f609b42e3f7b5cbe41c76SHA256: 8af6691384f6cc3996aa0b8224bdeec28059210a2a0a3bd85dbd4af918a2d430Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhadoop-mapreduce-client-core-2.7.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hadoop-mapreduce-client-core High Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name hadoop Highest Vendor jar package name hadoop Low Vendor jar package name mapreduce Highest Vendor jar package name mapreduce Low Vendor pom artifactid hadoop-mapreduce-client-core Highest Vendor pom artifactid hadoop-mapreduce-client-core Low Vendor pom groupid org.apache.hadoop Highest Vendor pom name hadoop-mapreduce-client-core High Vendor pom parent-artifactid hadoop-mapreduce-client Low Product file name hadoop-mapreduce-client-core High Product jar package name apache Highest Product jar package name hadoop Highest Product jar package name hadoop Low Product jar package name mapreduce Highest Product jar package name mapreduce Low Product pom artifactid hadoop-mapreduce-client-core Highest Product pom groupid org.apache.hadoop Highest Product pom name hadoop-mapreduce-client-core High Product pom parent-artifactid hadoop-mapreduce-client Medium Version file version 2.7.1 High Version pom version 2.7.1 Highest
Related Dependencies hadoop-client-2.7.1.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-client/2.7.1/hadoop-client-2.7.1.jar MD5: 34552f854720759214db5e9064d2f7af SHA1: dbc2faacd210e6a1e3eb7def6e42065c7457d960 SHA256: 7eef4e1162da1129bfdf59dd390bcb90c33332db4aeaeec37efc701413361051 pkg:maven/org.apache.hadoop/hadoop-client@2.7.1 hadoop-distcp-2.7.1.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-distcp/2.7.1/hadoop-distcp-2.7.1.jar MD5: 161d2ed400cb3d8dddb2116d2c591854 SHA1: cfa5eed3bc298f5b76417c45052a940e51747eb9 SHA256: b9e34cc51dace65c134def69074a3d9b444f3ca1d950632131dec9da2cf59f17 pkg:maven/org.apache.hadoop/hadoop-distcp@2.7.1 hadoop-mapreduce-client-app-2.7.1.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-mapreduce-client-app/2.7.1/hadoop-mapreduce-client-app-2.7.1.jar MD5: 8b400cbfa97f32b4f3369b7af27a3f9d SHA1: 8050f2a7dc051b54817b81585558f32aecd65ce0 SHA256: 928c174b486eafee24c02c6a47b2b7a50d3c92468894696ba9f86c0e661084b9 pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-app@2.7.1 hadoop-mapreduce-client-common-2.7.1.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-mapreduce-client-common/2.7.1/hadoop-mapreduce-client-common-2.7.1.jar MD5: a4b4ec472bbd6a154021efe4a81f1934 SHA1: 116100a4016451a98733489fc1227925b2dd4a4a SHA256: 11217152a529e5916d46c67410a057fb87e2b8fefe06118c075a3b8339de9ce0 pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-common@2.7.1 hadoop-mapreduce-client-jobclient-2.7.1.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-mapreduce-client-jobclient/2.7.1/hadoop-mapreduce-client-jobclient-2.7.1.jar MD5: e99d0893347ffa29cb988379fe6a02c0 SHA1: f68441815faca5419eb5e8ab906ba21f14a23600 SHA256: 54f05ecf8e87f05e8604b5ad4d8abf92feb473e303bacca9f983be75ea39d2c5 pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-jobclient@2.7.1 hadoop-mapreduce-client-shuffle-2.7.1.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-mapreduce-client-shuffle/2.7.1/hadoop-mapreduce-client-shuffle-2.7.1.jar MD5: 4f0609cbfb6d6bfab890dcde9d25d1f5 SHA1: 4c8e530a0e24142380a548e3d29b411443ae86f6 SHA256: 695f00f41bd1cd15b3ca26f139fb031565becd2635315211203c4e685e165e6a pkg:maven/org.apache.hadoop/hadoop-mapreduce-client-shuffle@2.7.1 hadoop-yarn-client-2.7.1.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-client/2.7.1/hadoop-yarn-client-2.7.1.jar MD5: 5ddc298626059b9216d7624407820d93 SHA1: d138b9194b64c6883270f4606a07d55203cd5ddd SHA256: 4ae0e9c6d14d4edd3d9357734e3ae81c13a75556515778faf3081923115dbfdc pkg:maven/org.apache.hadoop/hadoop-yarn-client@2.7.1 CVE-2016-3086 suppress
The YARN NodeManager in Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3 can leak the password for credential store provider used by the NodeManager to YARN Applications. CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-25168 suppress
Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An attacker can inject arbitrary commands. This is only used in Hadoop 3.3 InMemoryAliasMap.completeBootstrapTransfer, which is only ever run by a local user. It has been used in Hadoop 2.x for yarn localization, which does enable remote code execution. It is used in Apache Spark, from the SQL command ADD ARCHIVE. As the ADD ARCHIVE command adds new binaries to the classpath, being able to execute shell scripts does not confer new permissions to the caller. SPARK-38305. "Check existence of file before untarring/zipping", which is included in 3.3.0, 3.1.4, 3.2.2, prevents shell commands being executed, regardless of which version of the hadoop libraries are in use. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.3 or upper (including HADOOP-18136). CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-26612 suppress
In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn't resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3 CWE-59 Improper Link Resolution Before File Access ('Link Following')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2016-5393 suppress
In Apache Hadoop 2.6.x before 2.6.5 and 2.7.x before 2.7.3, a remote user who can authenticate with the HDFS NameNode can possibly run arbitrary commands with the same privileges as the HDFS service. CWE-284 Improper Access Control
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2016-6811 suppress
In Apache Hadoop 2.x before 2.7.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. CWE-264 Permissions, Privileges, and Access Controls
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2018-8009 suppress
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-8029 suppress
In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. NVD-CWE-noinfo
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-9492 suppress
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-33036 suppress
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. CWE-24 Path Traversal: '../filedir', CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-264 Permissions, Privileges, and Access Controls
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-3166 suppress
In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that make it world readable is localized via YARN's localization mechanism, that file will be stored in a world-readable location and can be shared freely with any application that requests to localize that file. CWE-732 Incorrect Permission Assignment for Critical Resource
CVSSv2:
Base Score: MEDIUM (4.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.8) Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-11768 suppress
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage. CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-1296 suppress
In Apache Hadoop 3.0.0-alpha1 to 3.0.0, 2.9.0, 2.8.0 to 2.8.3, and 2.5.0 to 2.7.5, HDFS exposes extended attribute key/value pairs during listXAttrs, verifying only path-level search access to the directory rather than path-level read permission to the referent. CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-15713 suppress
Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host. CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2016-5001 suppress
This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft a block token that grants unauthorized read access to random files by guessing certain fields in the token. CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: LOW (2.1) Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/jquery/jquery-1.8.2.min.jsMD5: 0b6ecf17e30037994d3ffee51b525914SHA1: d09d3a99ed25d0f1fbe6856de9e14ffd33557256SHA256: f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name jquery High Product file name jquery High Version file version 1.8.2.min High
Related Dependencies hadoop-yarn-common-3.1.0.jar: jquery-1.8.2.min.js.gz: jquery-1.8.2.min.jsFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/jquery/jquery-1.8.2.min.js.gz/jquery-1.8.2.min.js MD5: 0b6ecf17e30037994d3ffee51b525914 SHA1: d09d3a99ed25d0f1fbe6856de9e14ffd33557256 SHA256: f554d2f09272c6f71447ebfe4532d3b1dd1959bce669f9a5ccc99e64ef511729 pkg:javascript/jquery@1.8.2.min CVE-2012-6708 suppress
jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerable versions, jQuery determined whether the input was HTML by looking for the '<' character anywhere in the string, giving attackers more flexibility when attempting to construct a malicious payload. In fixed versions, jQuery only deems the input to be HTML if it explicitly starts with the '<' character, limiting exploitability only to attackers who can control the beginning of a string, which is far less common. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions (NVD):
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions up to (excluding) 1.9.0 CVE-2015-9251 suppress
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions (NVD):
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions up to (excluding) 3.0.0 cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_platform:2.6.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_platform:2.6.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_converged_application_server:*:*:*:*:*:*:*:* versions up to (excluding) 7.0.0.1 cpe:2.3:a:oracle:communications_interactive_session_recorder:6.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:6.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:6.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_services_gatekeeper:*:*:*:*:*:*:*:* versions up to (excluding) 6.1.0.4.0 cpe:2.3:a:oracle:communications_webrtc_session_controller:*:*:*:*:*:*:*:* versions up to (excluding) 7.2 cpe:2.3:a:oracle:endeca_information_discovery_studio:3.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.2.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_operations_monitor:3.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_operations_monitor:4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 7.3.3; versions up to (including) 7.3.5 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.0; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:* versions from (including) 8.0.5; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_liquidity_risk_management:*:*:*:*:*:*:*:* versions from (including) 8.0.2; versions up to (including) 8.0.6 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* versions from (including) 8.0.2; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.6 cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_reconciliation_framework:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.11:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:oss_support_tools:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:15.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:16.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:17.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 17.1; versions up to (including) 17.12 cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:real-time_scheduler:2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_allocation:15.0.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_invoice_matching:15.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_sales_audit:15.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_workforce_management_software:1.60.9:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_workforce_management_software:1.64.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:siebel_ui_framework:18.10:*:*:*:*:*:*:* cpe:2.3:a:oracle:siebel_ui_framework:18.11:*:*:*:*:*:*:* cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:* versions from (including) 4.3.0.1; versions up to (including) 4.3.0.4 cpe:2.3:a:oracle:utilities_mobile_workforce_management:2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:webcenter_sites:11.1.1.8.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3:*:*:*:*:*:*:* CVE-2019-11358 suppress
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
cve@mitre.org - BROKEN_LINK,THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY info - https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ info - https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b info - https://nvd.nist.gov/vuln/detail/CVE-2019-11358 Vulnerable Software & Versions (NVD):
cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* versions from (including) 1.11.0; versions up to (excluding) 1.11.9 cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* versions from (including) 1.12.0; versions up to (excluding) 1.12.6 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.66 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.5.0; versions up to (excluding) 8.5.15 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.6.0; versions up to (excluding) 8.6.15 cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.9.4 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions up to (excluding) 3.4.0 cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 19.1 cpe:2.3:a:oracle:application_service_level_management:13.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_service_level_management:13.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* versions from (including) 2.7.0; versions up to (including) 2.8.0 cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* versions from (including) 2.4.0; versions up to (including) 2.10.0 cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* versions from (including) 6.0; versions up to (including) 6.4 cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* versions from (including) 4.1; versions up to (including) 4.3 cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:diagnostic_assistant:2.12.36:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 7.3.3; versions up to (including) 7.3.5 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.2; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:* versions from (including) 8.0.5; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* versions from (including) 8.0.2; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_retail_customer_analytics:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.6 cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* versions from (including) 19.1.0; versions up to (including) 19.1.2 cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* versions from (including) 5.0.0.0; versions up to (including) 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_performance_insight:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:knowledge:*:*:*:*:*:*:*:* versions from (including) 8.6.0; versions up to (including) 8.6.3 cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.15 cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.15 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2.0; versions up to (including) 16.2.11 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0; versions up to (including) 17.12.7 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0; versions up to (including) 18.8.9 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0; versions up to (including) 19.12.4 cpe:2.3:a:oracle:primavera_gateway:15.2.18:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 17.7; versions up to (including) 17.12 cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:real-time_scheduler:*:*:*:*:*:*:*:* versions from (including) 2.3.0.1; versions up to (including) 2.3.0.3 cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:siebel_mobile_applications:*:*:*:*:*:*:*:* versions up to (including) 19.8 cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:system_utilities:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:tape_library_acsls:8.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:tape_library_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:transportation_management:1.4.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:utilities_mobile_workforce_management:*:*:*:*:*:*:*:* versions from (including) 2.3.0.1; versions up to (including) 2.3.0.3 cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:* cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:* CVE-2020-11022 suppress
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MITIGATION,THIRD_PARTY_ADVISORY security-advisories@github.com - MITIGATION,VENDOR_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.70 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.7.0; versions up to (excluding) 8.7.14 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.8.0; versions up to (excluding) 8.8.6 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions from (including) 1.2; versions up to (excluding) 3.5.0 cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_supplier_collaboration_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:* versions from (including) 18.1; versions up to (including) 20.1 cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:* versions up to (excluding) 21.1.2 cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router_idih\::*:*:*:*:*:*:*:* versions from (including) 8.0.0; versions up to (including) 8.2.2 cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6.0.0; versions up to (including) 8.1.0.0.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* versions from (including) 19.1.0; versions up to (including) 19.1.2 cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:19.1.0-19.1.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:insurance_data_foundation:8.0.6-8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* versions from (including) 5.0.0.0; versions up to (including) 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.20 cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.20 cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.9 CVE-2020-11023 suppress
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK,MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.70 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.7.0; versions up to (excluding) 8.7.14 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.8.0; versions up to (excluding) 8.8.6 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions from (including) 1.0.3; versions up to (excluding) 3.5.0 cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:snapcenter_server:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 20.2 cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* versions from (including) 2.7.0; versions up to (including) 2.8.0 cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* versions from (including) 2.4.0; versions up to (including) 2.10.0 cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:* cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* versions from (including) 6.1; versions up to (including) 6.4 cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* versions from (including) 4.1; versions up to (including) 4.3 cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:health_sciences_inform:6.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:* versions up to (excluding) 9.2.5.0 cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* versions up to (excluding) 9.2.5.0 cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:* versions up to (excluding) 2.12.41 cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_resources:9.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2; versions up to (including) 16.2.11 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0; versions up to (including) 17.12.7 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0; versions up to (including) 18.8.9 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0; versions up to (including) 19.12.4 cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:siebel_mobile:*:*:*:*:*:*:*:* versions up to (including) 20.12 cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.9 CVE-2020-7656 suppress
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions (NVD):
cpe:2.3:a:jquery:jquery:*:*:*:*:*:node.js:*:* versions up to (excluding) 1.9.0 cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:* cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:* cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates (RETIREJS)suppress
jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates Unscored:
References:
File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/jquery/jquery-ui-1.9.1.custom.min.jsMD5: ab92e49c769e9593ff52cbdb48a9dd03SHA1: 43751816cc0b6480e8fb3b2398952d6a865e8b89SHA256: 1fb0b66548624c8cf9ebf2d0c81970910ab0c8031a8ada6f8e6f884114344e8dReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name jquery-ui High Vendor file name jquery-ui-dialog High Product file name jquery-ui High Product file name jquery-ui-dialog High Version file version 1.9.1 High
Related Dependencies hadoop-yarn-common-3.1.0.jar: jquery-ui-1.9.1.custom.min.js.gz: jquery-ui-1.9.1.custom.min.jsFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/jquery/jquery-ui-1.9.1.custom.min.js.gz/jquery-ui-1.9.1.custom.min.js MD5: ab92e49c769e9593ff52cbdb48a9dd03 SHA1: 43751816cc0b6480e8fb3b2398952d6a865e8b89 SHA256: 1fb0b66548624c8cf9ebf2d0c81970910ab0c8031a8ada6f8e6f884114344e8d pkg:javascript/jquery-ui-dialog@1.9.1 pkg:javascript/jquery-ui@1.9.1 CVE-2010-5312 suppress
Cross-site scripting (XSS) vulnerability in jquery.ui.dialog.js in the Dialog widget in jQuery UI before 1.10.0 allows remote attackers to inject arbitrary web script or HTML via the title option. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
cve@mitre.org - BROKEN_LINK,THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - BROKEN_LINK,THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - EXPLOIT,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - VENDOR_ADVISORY info - http://bugs.jqueryui.com/ticket/6016 info - https://nvd.nist.gov/vuln/detail/CVE-2010-5312 Vulnerable Software & Versions (NVD):
cpe:2.3:a:apache:drill:1.16.0:*:*:*:*:*:*:* cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.86 cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:* versions up to (excluding) 1.10.0 cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* CVE-2016-7103 suppress
Cross-site scripting (XSS) vulnerability in jQuery UI before 1.12.0 might allow remote attackers to inject arbitrary web script or HTML via the closeText parameter of the dialog function. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
cve@mitre.org - BROKEN_LINK,THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - EXPLOIT,ISSUE_TRACKING,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY info - https://github.com/jquery/api.jqueryui.com/issues/281 info - https://nvd.nist.gov/vuln/detail/CVE-2016-7103 info - https://snyk.io/vuln/npm:jquery-ui:20160721 Vulnerable Software & Versions (NVD):
cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:*:*:* versions from (including) 1.10.0; versions up to (including) 1.11.4 cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 19.1 cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:* cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:* cpe:2.3:a:oracle:hospitality_cruise_fleet_management:9.0.11:*:*:*:*:*:*:* cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:* versions up to (excluding) 2.12.42 cpe:2.3:a:oracle:oss_support_tools:2.12.42:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 16.0; versions up to (including) 16.2 cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 17.0; versions up to (including) 17.12.4 cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 18.0; versions up to (including) 18.8.4 cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:* versions up to (including) 21.2 cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:7.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:8:*:*:*:*:*:*:* cpe:2.3:a:redhat:openstack:9:*:*:*:*:*:*:* CVE-2021-41182 suppress
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://github.com/jquery/jquery-ui/security/advisories/GHSA-9gj3-hwp5-pmwc info - https://nvd.nist.gov/vuln/detail/CVE-2021-41182 security-advisories@github.com - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.86 cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:* versions up to (excluding) 1.13.0 cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 22.1.1 cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:* versions up to (excluding) 23.1 cpe:2.3:a:oracle:big_data_spatial_and_graph:23.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:5.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_inventory_management:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_suite8:*:*:*:*:*:*:*:* versions from (including) 8.11.0; versions up to (including) 8.14.0 cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* versions up to (including) 9.2.6.3 cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.29 cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.25 cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 17.7; versions up to (including) 17.12 cpe:2.3:a:oracle:primavera_unifier:17.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:17.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:17.9:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:17.10:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:17.11:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:17.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:rest_data_services:*:*:*:*:-:*:*:* versions up to (excluding) 22.1.1 cpe:2.3:a:oracle:rest_data_services:22.1.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* versions up to (excluding) 5.21.0 CVE-2021-41183 suppress
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://bugs.jqueryui.com/ticket/15284 info - https://nvd.nist.gov/vuln/detail/CVE-2021-41183 security-advisories@github.com - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY security-advisories@github.com - ISSUE_TRACKING,VENDOR_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,RELEASE_NOTES,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.86 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 9.2.0; versions up to (excluding) 9.2.11 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 9.3.0; versions up to (excluding) 9.3.3 cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:* versions up to (excluding) 1.13.0 cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 22.1.1 cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:* versions up to (excluding) 23.1 cpe:2.3:a:oracle:big_data_spatial_and_graph:23.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:5.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_inventory_management:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_suite8:*:*:*:*:*:*:*:* versions from (including) 8.11.0; versions up to (including) 11.14.0 cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* versions up to (including) 9.2.6.3 cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:* versions up to (including) 8.0.29 cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.5 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.7; versions up to (including) 17.12 cpe:2.3:a:oracle:primavera_gateway:18.8.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:19.12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:20.12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:21.12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:rest_data_services:*:*:*:*:-:*:*:* versions up to (excluding) 22.1.1 cpe:2.3:a:oracle:rest_data_services:22.1.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* versions up to (excluding) 5.21.0 CVE-2021-41184 suppress
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://github.com/jquery/jquery-ui/security/advisories/GHSA-gpqq-952q-5327 info - https://nvd.nist.gov/vuln/detail/CVE-2021-41184 security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MITIGATION,PATCH,VENDOR_ADVISORY security-advisories@github.com - PATCH,RELEASE_NOTES,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,VENDOR_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.86 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 9.2.0; versions up to (excluding) 9.2.11 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 9.3.0; versions up to (excluding) 9.3.3 cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:* versions up to (excluding) 1.13.0 cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 22.1.1 cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:* versions up to (excluding) 23.1 cpe:2.3:a:oracle:big_data_spatial_and_graph:23.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:5.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_inventory_management:9.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_suite8:*:*:*:*:*:*:*:* versions from (including) 8.11.0; versions up to (including) 8.14.0 cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* versions up to (including) 9.2.6.3 cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.25 cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 17.7; versions up to (including) 17.12 cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:* cpe:2.3:a:oracle:rest_data_services:*:*:*:*:-:*:*:* versions up to (excluding) 22.1.1 cpe:2.3:a:oracle:rest_data_services:22.1.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:* versions up to (excluding) 5.21.0 CVE-2022-31160 suppress
jQuery UI is a curated set of user interface interactions, effects, widgets, and themes built on top of jQuery. Versions prior to 1.13.2 are potentially vulnerable to cross-site scripting. Initializing a checkboxradio widget on an input enclosed within a label makes that parent label contents considered as the input label. Calling `.checkboxradio( "refresh" )` on such a widget and the initial HTML contained encoded HTML entities will make them erroneously get decoded. This can lead to potentially executing JavaScript code. The bug has been patched in jQuery UI 1.13.2. To remediate the issue, someone who can change the initial HTML can wrap all the non-input contents of the `label` in a `span`. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.0:*:*:*:*:drupal:*:* cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.1:*:*:*:*:drupal:*:* cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.2:*:*:*:*:drupal:*:* cpe:2.3:a:drupal:jquery_ui_checkboxradio:8.x-1.3:*:*:*:*:drupal:*:* cpe:2.3:a:jqueryui:jquery_ui:*:*:*:*:*:jquery:*:* versions up to (excluding) 1.13.2 cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/dt-1.9.4/js/jquery.dataTables.min.jsMD5: d97096bb845d459b8ee533593f354423SHA1: 89368b14ccdc15b9ef346fbf18057239bac77406SHA256: 852131ecbfe128c189d746f3431f289bf08cc2af2c41b81225836061085e025bReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
Related Dependencies hadoop-yarn-common-3.1.0.jar: jquery.dataTables.min.js.gz: jquery.dataTables.min.jsFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/dt-1.9.4/js/jquery.dataTables.min.js.gz/jquery.dataTables.min.js MD5: d97096bb845d459b8ee533593f354423 SHA1: 89368b14ccdc15b9ef346fbf18057239bac77406 SHA256: 852131ecbfe128c189d746f3431f289bf08cc2af2c41b81225836061085e025b File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/jt/jquery.jstree.jsMD5: b37a65f92d4cfe8d07d40c74e56d2f94SHA1: ed2fb0806a6c886f0b6378d5d83b24398d73809dSHA256: 9d8f76bde149d6811728ce7406bbd65766cdbcd4171b43188290555b9f11749cReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
Related Dependencies hadoop-yarn-common-3.1.0.jar: jquery.jstree.js.gz: jquery.jstree.jsFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/jt/jquery.jstree.js.gz/jquery.jstree.js MD5: b37a65f92d4cfe8d07d40c74e56d2f94 SHA1: ed2fb0806a6c886f0b6378d5d83b24398d73809d SHA256: 9d8f76bde149d6811728ce7406bbd65766cdbcd4171b43188290555b9f11749c File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/dt-sorting/natural.jsMD5: 6119b176fc9ded71d13d2d9e4b166ba9SHA1: 2f5ecc90d7e4a8d6922c345cadf4952be2eb0d6dSHA256: 7abeaadbaef39a5a540701143e8bdc05a82be5030b69eb03373d3b7a84c0225fReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
Related Dependencies hadoop-yarn-common-3.1.0.jar: natural.js.gz: natural.jsFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/dt-sorting/natural.js.gz/natural.js MD5: 6119b176fc9ded71d13d2d9e4b166ba9 SHA1: 2f5ecc90d7e4a8d6922c345cadf4952be2eb0d6d SHA256: 7abeaadbaef39a5a540701143e8bdc05a82be5030b69eb03373d3b7a84c0225f File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/yarn.dt.plugins.jsMD5: b82d89d6b563c2ed978a7a266b9d4fe9SHA1: 85a36b2ab53accba084dc1747a157f33ed199dfbSHA256: 314c606bd478eb61227eb7883f56ce0b6083b9f98be6745067114c58e4eaa00bReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
Related Dependencies hadoop-yarn-common-3.1.0.jar: yarn.dt.plugins.js.gz: yarn.dt.plugins.jsFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar/webapps/static/yarn.dt.plugins.js.gz/yarn.dt.plugins.js MD5: b82d89d6b563c2ed978a7a266b9d4fe9 SHA1: 85a36b2ab53accba084dc1747a157f33ed199dfb SHA256: 314c606bd478eb61227eb7883f56ce0b6083b9f98be6745067114c58e4eaa00b File Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-server-common/3.1.0/hadoop-yarn-server-common-3.1.0.jarMD5: 463458cfcce056f130ea83c26a056cfdSHA1: d069b14ed7d4d3b5079bd00a6ee3609652a1d110SHA256: d416a60aa869650d8a97d8a16a13a9a7f508ffcd8ae5f8e9a3592943e96fdc6fReferenced In Project/Scope: shardingsphere-infra-database-hive:providedhadoop-yarn-server-common-3.1.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hadoop-yarn-server-common High Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name hadoop Highest Vendor jar package name hadoop Low Vendor jar package name server Highest Vendor jar package name yarn Highest Vendor jar package name yarn Low Vendor pom artifactid hadoop-yarn-server-common Highest Vendor pom artifactid hadoop-yarn-server-common Low Vendor pom groupid org.apache.hadoop Highest Vendor pom name Apache Hadoop YARN Server Common High Vendor pom parent-artifactid hadoop-yarn-server Low Product file name hadoop-yarn-server-common High Product jar package name apache Highest Product jar package name hadoop Highest Product jar package name hadoop Low Product jar package name server Highest Product jar package name server Low Product jar package name yarn Highest Product jar package name yarn Low Product pom artifactid hadoop-yarn-server-common Highest Product pom groupid org.apache.hadoop Highest Product pom name Apache Hadoop YARN Server Common High Product pom parent-artifactid hadoop-yarn-server Medium Version file version 3.1.0 High Version pom version 3.1.0 Highest
Related Dependencies hadoop-annotations-3.1.0.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-annotations/3.1.0/hadoop-annotations-3.1.0.jar MD5: 5b5471543f158f16385453328e055f3c SHA1: 9725f93909375d84510a8af1e711d474c641b225 SHA256: c165f0fadd3e2bd3ea061c61ead7d297fa4c0f00e590ebf01fa79eabc16f228a pkg:maven/org.apache.hadoop/hadoop-annotations@3.1.0 hadoop-auth-3.1.0.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-auth/3.1.0/hadoop-auth-3.1.0.jar MD5: f5f11e9a7f87584a7f8646ffa6e8a4f0 SHA1: aac129a6b51c08d0c2efb8bd8f167ce3505b9100 SHA256: bc659a1e01395e92845a275069cc5bd044ce96baf105e62a22bcea6a74c5ae73 pkg:maven/org.apache.hadoop/hadoop-auth@3.1.0 hadoop-hdfs-3.1.0.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-hdfs/3.1.0/hadoop-hdfs-3.1.0.jar MD5: cd4197ba5bd3c7d8bc8a49c43dbeba4b SHA1: 526d4a54bd221f7fe97fb3fc729941baaa294d86 SHA256: a89bf71007ade8034c390178cbc16a1cd830f5c5883104fba1d13cc7cc907d49 pkg:maven/org.apache.hadoop/hadoop-hdfs@3.1.0 hadoop-yarn-api-3.1.0.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-api/3.1.0/hadoop-yarn-api-3.1.0.jar MD5: a3f8f065e4725a200e4d41333aa31a1a SHA1: f0314f8608f3f9ab1e0b2b576d57b1862a1159bd SHA256: 24c798dac77292ac8397590cb9c72a0705be9475bba4a2c293ec2f50d4e05e9f pkg:maven/org.apache.hadoop/hadoop-yarn-api@3.1.0 hadoop-yarn-common-3.1.0.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-common/3.1.0/hadoop-yarn-common-3.1.0.jar MD5: b7d5a341f2a280269d233c5988fefb1a SHA1: 90da21deee17ad46cb2e6103183eff40aff490b5 SHA256: c190773c1ce7acf3a3fa8cbbd049db7b23eb1b1c874fe1a8ae6a3f4cb6fd52a8 pkg:maven/org.apache.hadoop/hadoop-yarn-common@3.1.0 hadoop-yarn-registry-3.1.0.jarFile Path: /home/runner/.m2/repository/org/apache/hadoop/hadoop-yarn-registry/3.1.0/hadoop-yarn-registry-3.1.0.jar MD5: 0e3c7a34b5219abf34358f9de1bac9f8 SHA1: 62487599b5089968faeb00830620c477d566dff7 SHA256: 8cfd91cae159b9e8048dfa54fa0f7e5c9415d88ffd0672f95cfeb7f79cb91e6b pkg:maven/org.apache.hadoop/hadoop-yarn-registry@3.1.0 CVE-2021-37404 suppress
There is a potential heap buffer overflow in Apache Hadoop libhdfs native code. Opening a file path provided by user without validation may result in a denial of service or arbitrary code execution. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. CWE-787 Out-of-bounds Write
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-25168 suppress
Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An attacker can inject arbitrary commands. This is only used in Hadoop 3.3 InMemoryAliasMap.completeBootstrapTransfer, which is only ever run by a local user. It has been used in Hadoop 2.x for yarn localization, which does enable remote code execution. It is used in Apache Spark, from the SQL command ADD ARCHIVE. As the ADD ARCHIVE command adds new binaries to the classpath, being able to execute shell scripts does not confer new permissions to the caller. SPARK-38305. "Check existence of file before untarring/zipping", which is included in 3.3.0, 3.1.4, 3.2.2, prevents shell commands being executed, regardless of which version of the hadoop libraries are in use. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.3 or upper (including HADOOP-18136). CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-26612 suppress
In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn't resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3 CWE-59 Improper Link Resolution Before File Access ('Link Following')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-8009 suppress
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-8029 suppress
In Apache Hadoop versions 3.0.0-alpha1 to 3.1.0, 2.9.0 to 2.9.1, and 2.2.0 to 2.8.4, a user who can escalate to yarn user can possibly run arbitrary commands as root user. NVD-CWE-noinfo
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-9492 suppress
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-25642 suppress
ZKConfigurationStore which is optionally used by CapacityScheduler of Apache Hadoop YARN deserializes data obtained from ZooKeeper without validation. An attacker having access to ZooKeeper can run arbitrary commands as YARN user by exploiting this. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.4 or later (containing YARN-11126) if ZKConfigurationStore is used. CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-33036 suppress
In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. CWE-24 Path Traversal: '../filedir', CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-264 Permissions, Privileges, and Access Controls
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-11768 suppress
In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage. CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Core API and libraries of hamcrest matcher framework. License:
BSD License 3: http://opensource.org/licenses/BSD-3-Clause File Path: /home/runner/.m2/repository/org/hamcrest/hamcrest/2.2/hamcrest-2.2.jar
MD5: 10b47e837f271d0662f28780e60388e8
SHA1: 1820c0968dba3a11a1b30669bb1f01978a91dedc
SHA256: 5e62846a89f05cd78cd9c1a553f340d002458380c320455dd1f8fc5497a8a1c1
Referenced In Projects/Scopes: shardingsphere-test-it-parser:compile shardingsphere-test-util:compile shardingsphere-test-it-yaml:compile hamcrest-2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-yaml@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name hamcrest High Vendor jar package name core Highest Vendor jar package name hamcrest Highest Vendor jar package name matcher Highest Vendor Manifest automatic-module-name org.hamcrest Medium Vendor Manifest bundle-symbolicname org.hamcrest Medium Vendor Manifest Implementation-Vendor hamcrest.org High Vendor pom artifactid hamcrest Highest Vendor pom artifactid hamcrest Low Vendor pom developer id joewalnes Medium Vendor pom developer id npryce Medium Vendor pom developer id sf105 Medium Vendor pom developer name Joe Walnes Medium Vendor pom developer name Nat Pryce Medium Vendor pom developer name Steve Freeman Medium Vendor pom groupid org.hamcrest Highest Vendor pom name Hamcrest High Vendor pom url http://hamcrest.org/JavaHamcrest/ Highest Product file name hamcrest High Product jar package name core Highest Product jar package name hamcrest Highest Product jar package name matcher Highest Product Manifest automatic-module-name org.hamcrest Medium Product Manifest Bundle-Name hamcrest Medium Product Manifest bundle-symbolicname org.hamcrest Medium Product Manifest Implementation-Title hamcrest High Product pom artifactid hamcrest Highest Product pom developer id joewalnes Low Product pom developer id npryce Low Product pom developer id sf105 Low Product pom developer name Joe Walnes Low Product pom developer name Nat Pryce Low Product pom developer name Steve Freeman Low Product pom groupid org.hamcrest Highest Product pom name Hamcrest High Product pom url http://hamcrest.org/JavaHamcrest/ Medium Version file version 2.2 High Version Manifest Bundle-Version 2.2 High Version Manifest Implementation-Version 2.2 High Version pom version 2.2 Highest
Description:
Interfaces to be implemented in order to smooth
over hadoop version differences
File Path: /home/runner/.m2/repository/org/apache/hbase/hbase-hadoop2-compat/2.0.0-alpha4/hbase-hadoop2-compat-2.0.0-alpha4.jarMD5: 38fcdf060060ae5d9c9a227d69e3ff04SHA1: e0606310f971f725f1125710ed15396c8e9e68dcSHA256: 55104b576bbe9163eaae2de771c531677fba40d13a5b037bdc2fc2e3742a0809Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhbase-hadoop2-compat-2.0.0-alpha4.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hbase-hadoop2-compat High Vendor jar package name apache Highest Vendor jar package name hadoop Highest Vendor jar package name hbase Highest Vendor Manifest implementation-url http://hbase.apache.org/hbase-build-configuration/hbase-hadoop2-compat Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.hbase Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid hbase-hadoop2-compat Highest Vendor pom artifactid hbase-hadoop2-compat Low Vendor pom groupid org.apache.hbase Highest Vendor pom name Apache HBase - Hadoop Two Compatibility High Vendor pom parent-artifactid hbase-build-configuration Low Product file name hbase-hadoop2-compat High Product jar package name apache Highest Product jar package name hadoop Highest Product jar package name hbase Highest Product Manifest Implementation-Title Apache HBase - Hadoop Two Compatibility High Product Manifest implementation-url http://hbase.apache.org/hbase-build-configuration/hbase-hadoop2-compat Low Product Manifest specification-title Apache HBase - Hadoop Two Compatibility Medium Product pom artifactid hbase-hadoop2-compat Highest Product pom groupid org.apache.hbase Highest Product pom name Apache HBase - Hadoop Two Compatibility High Product pom parent-artifactid hbase-build-configuration Medium Version Manifest Implementation-Version 2.0.0-alpha4 High Version pom version 2.0.0-alpha4 Highest
CVE-2022-25168 suppress
Apache Hadoop's FileUtil.unTar(File, File) API does not escape the input file name before being passed to the shell. An attacker can inject arbitrary commands. This is only used in Hadoop 3.3 InMemoryAliasMap.completeBootstrapTransfer, which is only ever run by a local user. It has been used in Hadoop 2.x for yarn localization, which does enable remote code execution. It is used in Apache Spark, from the SQL command ADD ARCHIVE. As the ADD ARCHIVE command adds new binaries to the classpath, being able to execute shell scripts does not confer new permissions to the caller. SPARK-38305. "Check existence of file before untarring/zipping", which is included in 3.3.0, 3.1.4, 3.2.2, prevents shell commands being executed, regardless of which version of the hadoop libraries are in use. Users should upgrade to Apache Hadoop 2.10.2, 3.2.4, 3.3.3 or upper (including HADOOP-18136). CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-26612 suppress
In Apache Hadoop, The unTar function uses unTarUsingJava function on Windows and the built-in tar utility on Unix and other OSes. As a result, a TAR entry may create a symlink under the expected extraction directory which points to an external directory. A subsequent TAR entry may extract an arbitrary file into the external directory using the symlink name. This however would be caught by the same targetDirPath check on Unix because of the getCanonicalPath call. However on Windows, getCanonicalPath doesn't resolve symbolic links, which bypasses the check. unpackEntries during TAR extraction follows symbolic links which allows writing outside expected base directory on Windows. This was addressed in Apache Hadoop 3.2.3 CWE-59 Improper Link Resolution Before File Access ('Link Following')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-8009 suppress
Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is exploitable via the zip slip vulnerability in places that accept a zip file. CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-9492 suppress
In Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client might send SPNEGO authorization header to remote URL without proper verification. CWE-863 Incorrect Authorization
CVSSv2:
Base Score: MEDIUM (6.5) Vector: /AV:N/AC:L/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-8025 suppress
CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be treated as an authenticated user. https://issues.apache.org/jira/browse/HBASE-20664 implements a fix for this issue. It has been fixed in versions: 1.2.6.1, 1.3.2.1, 1.4.5, 2.0.1. CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-0212 suppress
In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions of the end-user. This issue is only relevant when HBase is configured with Kerberos authentication, HBase authorization is enabled, and the REST server is configured with SPNEGO authentication. This issue does not extend beyond the HBase REST server. NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (6.0) Vector: /AV:N/AC:M/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.6/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-3162 suppress
HDFS clients interact with a servlet on the DataNode to browse the HDFS namespace. The NameNode is provided as a query parameter that is not validated in Apache Hadoop before 2.7.0. CWE-20 Improper Input Validation
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.3) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2017-3161 suppress
The HDFS web UI in Apache Hadoop before 2.7.0 is vulnerable to a cross-site scripting (XSS) attack through an unescaped query parameter. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2016-5001 suppress
This is an information disclosure vulnerability in Apache Hadoop before 2.6.4 and 2.7.x before 2.7.2 in the short-circuit reads feature of HDFS. A local user on an HDFS DataNode may be able to craft a block token that grants unauthorized read access to random files by guessing certain fields in the token. CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: LOW (2.1) Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Server functionality for HBase File Path: /home/runner/.m2/repository/org/apache/hbase/hbase-server/2.0.0-alpha4/hbase-server-2.0.0-alpha4.jarMD5: 22c86e37152d18a19393ef334002e3a7SHA1: e546c6af993ff483d3be4ed6dd6b9e32173771d4SHA256: 019b532e0f2c19016100c6b004750fe453b57b4861d50af5e05fc070d9032095Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhbase-server-2.0.0-alpha4.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hbase-server High Vendor jar package name apache Highest Vendor jar package name hbase Highest Vendor jar package name server Highest Vendor Manifest implementation-url http://hbase.apache.org/hbase-build-configuration/hbase-server Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.hbase Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid hbase-server Highest Vendor pom artifactid hbase-server Low Vendor pom groupid org.apache.hbase Highest Vendor pom name Apache HBase - Server High Vendor pom parent-artifactid hbase-build-configuration Low Product file name hbase-server High Product jar package name apache Highest Product jar package name hbase Highest Product jar package name server Highest Product Manifest Implementation-Title Apache HBase - Server High Product Manifest implementation-url http://hbase.apache.org/hbase-build-configuration/hbase-server Low Product Manifest specification-title Apache HBase - Server Medium Product pom artifactid hbase-server Highest Product pom groupid org.apache.hbase Highest Product pom name Apache HBase - Server High Product pom parent-artifactid hbase-build-configuration Medium Version Manifest Implementation-Version 2.0.0-alpha4 High Version pom version 2.0.0-alpha4 Highest
Related Dependencies hbase-client-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-client/2.0.0-alpha4/hbase-client-2.0.0-alpha4.jar MD5: f9a3a77358069e0d12317a0a5eb97f33 SHA1: d58bddfa107ea0bdf0a1ef9f9d7e1626a50a1299 SHA256: 6c3fa637f6ee50ce9fc155e416859224704d4a91006d7392c507579f5a6c18c0 pkg:maven/org.apache.hbase/hbase-client@2.0.0-alpha4 hbase-common-2.0.0-alpha4-tests.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-common/2.0.0-alpha4/hbase-common-2.0.0-alpha4-tests.jar MD5: d8f3fabf6e6c761c3a3b3e0bd9c2b2b8 SHA1: 4387a31bd61d51b7de9bce354c89dc5c5b8c1768 SHA256: 6dee8a55d6e669f2193893b770c7c0ce76caa8a7f985a5f78a2a6e16b51a0153 pkg:maven/org.apache.hbase/hbase-common@2.0.0-alpha4 hbase-common-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-common/2.0.0-alpha4/hbase-common-2.0.0-alpha4.jar MD5: 79b7bfa636d7d36b7cc88aa9460f8d02 SHA1: 9a782bd40f6a5d8537db98439d69cf562b8071a9 SHA256: b5a478b3fa015f16338e2f673e43aa7718d3ec2e4fb902d1fbac8c98b8323441 pkg:maven/org.apache.hbase/hbase-common@2.0.0-alpha4 hbase-hadoop-compat-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-hadoop-compat/2.0.0-alpha4/hbase-hadoop-compat-2.0.0-alpha4.jar MD5: 81144903e3790bd0ff2eda5febcebc07 SHA1: 4bfa09be1f7c2cbd89447ef390fb39aa3c676543 SHA256: 832fbb83e61a1186cda962d1112075ab012bec5156aefbaf6afca9eda23e5ce0 pkg:maven/org.apache.hbase/hbase-hadoop-compat@2.0.0-alpha4 hbase-http-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-http/2.0.0-alpha4/hbase-http-2.0.0-alpha4.jar MD5: 0c3ae940514f94228d0631eb0bd8a692 SHA1: 29fdb3f9c2a61469f8f80dcb8912862dfdd30a40 SHA256: 890618c27cee37544cfc65245513a4f180e6a38b0a106e69e8457c6cf92b1d37 pkg:maven/org.apache.hbase/hbase-http@2.0.0-alpha4 hbase-mapreduce-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-mapreduce/2.0.0-alpha4/hbase-mapreduce-2.0.0-alpha4.jar MD5: 0448787c407966188b3a17b741067360 SHA1: 2bb165dbabb3113277921d2b70b5dc1dbc436140 SHA256: 924651216aadb121d0f66f1478d85010ae83406ced6fad881df391de4462194b pkg:maven/org.apache.hbase/hbase-mapreduce@2.0.0-alpha4 hbase-prefix-tree-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-prefix-tree/2.0.0-alpha4/hbase-prefix-tree-2.0.0-alpha4.jar MD5: 6df50fdaf975c3d25fe78de6369bfc05 SHA1: f14b84a725a34112df3946c4dd0d37d708253334 SHA256: 52f7268152e685433fa4e0ead2b42cea5cbc268ff8291829d1d11ba8fb0b8275 pkg:maven/org.apache.hbase/hbase-prefix-tree@2.0.0-alpha4 hbase-procedure-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-procedure/2.0.0-alpha4/hbase-procedure-2.0.0-alpha4.jar MD5: d3cb7493355eb4a3409b5556fa98d6ef SHA1: 396bb4253817aee3f8985d2bf88819338b7d9447 SHA256: feb2d673aeeaf1b37ea63c6d30382a5735278c81d92695d2b6cf9dd83aeef8cd pkg:maven/org.apache.hbase/hbase-procedure@2.0.0-alpha4 hbase-protocol-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-protocol/2.0.0-alpha4/hbase-protocol-2.0.0-alpha4.jar MD5: dcb5985830b66e61ccc4e9fe95edf111 SHA1: 13040379b16ac38b3107e9d5382fa894bc33db20 SHA256: 24ad9caf5c1e840870aa7e318e3c72b083b28b982fc6e7b036fbfe29239803de pkg:maven/org.apache.hbase/hbase-protocol@2.0.0-alpha4 hbase-protocol-shaded-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-protocol-shaded/2.0.0-alpha4/hbase-protocol-shaded-2.0.0-alpha4.jar MD5: bd522adc193693a5fe3c8dbd81fc926a SHA1: 802c906c7673cbc5cc2f9e42e0a80c6372f1fabc SHA256: 3c443725868a0859327116359de64ff9e3f42c6f43b118a18c05741538962e84 pkg:maven/org.apache.hbase/hbase-protocol-shaded@2.0.0-alpha4 hbase-replication-2.0.0-alpha4.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/hbase-replication/2.0.0-alpha4/hbase-replication-2.0.0-alpha4.jar MD5: 51b5f5ab612245d5dcf0e21328f1557e SHA1: 9fc1ccc9c4bdba52e1303c379d1f1fd6a50a2709 SHA256: 70bbb10bd9a36cee68add90103d6083e67ae8aace1eaca383ef3c1b551d46909 pkg:maven/org.apache.hbase/hbase-replication@2.0.0-alpha4 CVE-2018-8025 suppress
CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be treated as an authenticated user. https://issues.apache.org/jira/browse/HBASE-20664 implements a fix for this issue. It has been fixed in versions: 1.2.6.1, 1.3.2.1, 1.4.5, 2.0.1. CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-0212 suppress
In all previously released Apache HBase 2.x versions (2.0.0-2.0.4, 2.1.0-2.1.3), authorization was incorrectly applied to users of the HBase REST server. Requests sent to the HBase REST server were executed with the permissions of the REST server itself, not with the permissions of the end-user. This issue is only relevant when HBase is configured with Kerberos authentication, HBase authorization is enabled, and the REST server is configured with SPNEGO authentication. This issue does not extend beyond the HBase REST server. NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (6.0) Vector: /AV:N/AC:M/Au:S/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.6/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: /home/runner/.m2/repository/org/apache/hbase/hbase-server/2.0.0-alpha4/hbase-server-2.0.0-alpha4.jar/hbase-webapps/static/js/bootstrap.jsMD5: cd4d2bd0232733e89138fa7be0c67e42SHA1: 354ddf9b46127deb48c260c88c3e0189e2e49585SHA256: 912e9182833035948fe293a9d4e1ddc1382304916fae943d535e2685c8a9e850Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
Related Dependencies hive-service-3.1.3.jar: bootstrap.jsFile Path: /home/runner/.m2/repository/org/apache/hive/hive-service/3.1.3/hive-service-3.1.3.jar/hive-webapps/static/js/bootstrap.js MD5: cd4d2bd0232733e89138fa7be0c67e42 SHA1: 354ddf9b46127deb48c260c88c3e0189e2e49585 SHA256: 912e9182833035948fe293a9d4e1ddc1382304916fae943d535e2685c8a9e850 File Path: /home/runner/.m2/repository/org/apache/hbase/hbase-server/2.0.0-alpha4/hbase-server-2.0.0-alpha4.jar/hbase-webapps/static/js/bootstrap.min.jsMD5: 9e25e8e29ef0ea358e9778082ffd97d8SHA1: 75a42212affc118fef849aba4b9326a7da2acda1SHA256: 54d21b0676784d0c983bbd4093898770adefa932d89b72c8afd88183a19172a7Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
Related Dependencies hive-service-3.1.3.jar: bootstrap.min.jsFile Path: /home/runner/.m2/repository/org/apache/hive/hive-service/3.1.3/hive-service-3.1.3.jar/hive-webapps/static/js/bootstrap.min.js MD5: 9e25e8e29ef0ea358e9778082ffd97d8 SHA1: 75a42212affc118fef849aba4b9326a7da2acda1 SHA256: 54d21b0676784d0c983bbd4093898770adefa932d89b72c8afd88183a19172a7 File Path: /home/runner/.m2/repository/org/apache/hbase/hbase-server/2.0.0-alpha4/hbase-server-2.0.0-alpha4.jar/hbase-webapps/static/js/jquery.min.jsMD5: c9f5aeeca3ad37bf2aa006139b935f0aSHA1: 1055018c28ab41087ef9ccefe411606893dabea2SHA256: 87083882cc6015984eb0411a99d3981817f5dc5c90ba24f0940420c5548d82deReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name jquery High Product file name jquery High Version file version 3.2.1 High
CVE-2019-11358 suppress
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
cve@mitre.org - BROKEN_LINK,THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY info - https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ info - https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b info - https://nvd.nist.gov/vuln/detail/CVE-2019-11358 Vulnerable Software & Versions (NVD):
cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* versions from (including) 1.11.0; versions up to (excluding) 1.11.9 cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* versions from (including) 1.12.0; versions up to (excluding) 1.12.6 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.66 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.5.0; versions up to (excluding) 8.5.15 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.6.0; versions up to (excluding) 8.6.15 cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.9.4 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions up to (excluding) 3.4.0 cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 19.1 cpe:2.3:a:oracle:application_service_level_management:13.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_service_level_management:13.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* versions from (including) 2.7.0; versions up to (including) 2.8.0 cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* versions from (including) 2.4.0; versions up to (including) 2.10.0 cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* versions from (including) 6.0; versions up to (including) 6.4 cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* versions from (including) 4.1; versions up to (including) 4.3 cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:diagnostic_assistant:2.12.36:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 7.3.3; versions up to (including) 7.3.5 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.2; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:* versions from (including) 8.0.5; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* versions from (including) 8.0.2; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_retail_customer_analytics:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.6 cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* versions from (including) 19.1.0; versions up to (including) 19.1.2 cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* versions from (including) 5.0.0.0; versions up to (including) 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_performance_insight:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:knowledge:*:*:*:*:*:*:*:* versions from (including) 8.6.0; versions up to (including) 8.6.3 cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.15 cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.15 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2.0; versions up to (including) 16.2.11 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0; versions up to (including) 17.12.7 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0; versions up to (including) 18.8.9 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0; versions up to (including) 19.12.4 cpe:2.3:a:oracle:primavera_gateway:15.2.18:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 17.7; versions up to (including) 17.12 cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:real-time_scheduler:*:*:*:*:*:*:*:* versions from (including) 2.3.0.1; versions up to (including) 2.3.0.3 cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:siebel_mobile_applications:*:*:*:*:*:*:*:* versions up to (including) 19.8 cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:system_utilities:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:tape_library_acsls:8.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:tape_library_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:transportation_management:1.4.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:utilities_mobile_workforce_management:*:*:*:*:*:*:*:* versions from (including) 2.3.0.1; versions up to (including) 2.3.0.3 cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:* cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:* CVE-2020-11022 suppress
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MITIGATION,THIRD_PARTY_ADVISORY security-advisories@github.com - MITIGATION,VENDOR_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.70 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.7.0; versions up to (excluding) 8.7.14 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.8.0; versions up to (excluding) 8.8.6 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions from (including) 1.2; versions up to (excluding) 3.5.0 cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_supplier_collaboration_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:* versions from (including) 18.1; versions up to (including) 20.1 cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:* versions up to (excluding) 21.1.2 cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router_idih\::*:*:*:*:*:*:*:* versions from (including) 8.0.0; versions up to (including) 8.2.2 cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6.0.0; versions up to (including) 8.1.0.0.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* versions from (including) 19.1.0; versions up to (including) 19.1.2 cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:19.1.0-19.1.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:insurance_data_foundation:8.0.6-8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* versions from (including) 5.0.0.0; versions up to (including) 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.20 cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.20 cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.9 CVE-2020-11023 suppress
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK,MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.70 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.7.0; versions up to (excluding) 8.7.14 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.8.0; versions up to (excluding) 8.8.6 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions from (including) 1.0.3; versions up to (excluding) 3.5.0 cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:snapcenter_server:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 20.2 cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* versions from (including) 2.7.0; versions up to (including) 2.8.0 cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* versions from (including) 2.4.0; versions up to (including) 2.10.0 cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:* cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* versions from (including) 6.1; versions up to (including) 6.4 cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* versions from (including) 4.1; versions up to (including) 4.3 cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:health_sciences_inform:6.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:* versions up to (excluding) 9.2.5.0 cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* versions up to (excluding) 9.2.5.0 cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:* versions up to (excluding) 2.12.41 cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_resources:9.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2; versions up to (including) 16.2.11 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0; versions up to (including) 17.12.7 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0; versions up to (including) 18.8.9 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0; versions up to (including) 19.12.4 cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:siebel_mobile:*:*:*:*:*:*:*:* versions up to (including) 20.12 cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.9 File Path: /home/runner/.m2/repository/org/apache/hbase/hbase-server/2.0.0-alpha4/hbase-server-2.0.0-alpha4.jar/hbase-webapps/static/js/tab.jsMD5: 021dd994239798184daf0ec3604e5109SHA1: 15983923aa7bed93d05545141878a33ea7b1f52cSHA256: 9116a482ec22f6d2aa45854c898dcdea5a8b0ecc41afbf756f28c6fac9963575Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
File Path: /home/runner/.m2/repository/org/apache/hbase/thirdparty/hbase-shaded-miscellaneous/1.0.1/hbase-shaded-miscellaneous-1.0.1.jar/META-INF/maven/com.google.code.gson/gson/pom.xmlMD5: 11320427eabbf0ef7ea53b4358cf5178SHA1: 1ed6338a2e133b0689437077a9102fe31fdef9ecSHA256: c81ee1099878f0d5b842b90890499a9eed6ddbdc4fb3ff57b792dc2e28a76fd5Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid gson Low Vendor pom groupid com.google.code.gson Highest Vendor pom name Gson High Vendor pom parent-artifactid gson-parent Low Product pom artifactid gson Highest Product pom groupid com.google.code.gson Highest Product pom name Gson High Product pom parent-artifactid gson-parent Medium Version pom version 2.8.1 Highest
CVE-2022-25647 suppress
The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Guava is a suite of core and expanded libraries that include
utility classes, google's collections, io classes, and much
much more.
Guava has only one code dependency - javax.annotation,
per the JSR-305 spec.
File Path: /home/runner/.m2/repository/org/apache/hbase/thirdparty/hbase-shaded-miscellaneous/1.0.1/hbase-shaded-miscellaneous-1.0.1.jar/META-INF/maven/com.google.guava/guava/pom.xmlMD5: 720ca75e346805cb7c5fb03b5d6a0966SHA1: b87878db57d5cfc2ca7d3972cc8f7486bf02fbcaSHA256: bfadb3b40f65dd6de1666d6b29f8bb54031396c76eeef4146cf9f28255f8bf33Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid guava Low Vendor pom groupid com.google.guava Highest Vendor pom name Guava: Google Core Libraries for Java High Vendor pom parent-artifactid guava-parent Low Product pom artifactid guava Highest Product pom groupid com.google.guava Highest Product pom name Guava: Google Core Libraries for Java High Product pom parent-artifactid guava-parent Medium Version pom version 22.0 Highest
CVE-2023-2976 suppress
Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1.0 to 31.1 on Unix systems and Android Ice Cream Sandwich allows other users and apps on the machine with access to the default Java temporary directory to be able to access the files created by the class.
Even though the security vulnerability is fixed in version 32.0.0, we recommend using version 32.0.1 as version 32.0.0 breaks some functionality under Windows.
CWE-552 Files or Directories Accessible to External Parties
CVSSv3:
Base Score: HIGH (7.1) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2018-10237 suppress
Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable. CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-8908 suppress
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the created directory is world-readable (readable by an attacker with access to the system). The method in question has been marked @Deprecated in versions 30.0 and later and should not be used. For Android developers, we recommend choosing a temporary directory API provided by Android, such as context.getCacheDir(). For other Java developers, we recommend migrating to the Java 7 API java.nio.file.Files.createTempDirectory() which explicitly configures permissions of 700, or configuring the Java runtime's java.io.tmpdir system property to point to a location whose permissions are appropriately configured.
CWE-378 Creation of Temporary File With Insecure Permissions, CWE-732 Incorrect Permission Assignment for Critical Resource
CVSSv2:
Base Score: LOW (2.1) Vector: /AV:L/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: LOW (3.3) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Utilities for Protocol Buffers File Path: /home/runner/.m2/repository/org/apache/hbase/thirdparty/hbase-shaded-miscellaneous/1.0.1/hbase-shaded-miscellaneous-1.0.1.jar/META-INF/maven/com.google.protobuf/protobuf-java-util/pom.xmlMD5: e526c088df7da8aacc0027c0b123c553SHA1: 901692c6e079197dfabbaf1da149a7365b84ee4eSHA256: 5ecd05fd7927022fce646d5bd1f923e0c01a874f7ffe7b734216108c86653a45Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid protobuf-java-util Low Vendor pom groupid com.google.protobuf Highest Vendor pom name Protocol Buffers [Util] High Vendor pom parent-artifactid protobuf-parent Low Product pom artifactid protobuf-java-util Highest Product pom groupid com.google.protobuf Highest Product pom name Protocol Buffers [Util] High Product pom parent-artifactid protobuf-parent Medium Version pom version 3.3.0 Highest
CVE-2022-3171 suppress
A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above. CWE-20 Improper Input Validation, NVD-CWE-noinfo
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-22569 suppress
An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions. NVD-CWE-noinfo, CWE-696 Incorrect Behavior Order
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: /home/runner/.m2/repository/org/apache/hbase/thirdparty/hbase-shaded-netty/1.0.1/hbase-shaded-netty-1.0.1.jar/META-INF/maven/io.netty/netty-all/pom.xmlMD5: df63c9ee89eb8fcbc272e3d6e0ebdd0bSHA1: e058a79064e009e0152f5cc694cc8c09601b0412SHA256: 22b8c1c0e74db303b342938ea47f0fd59e2b29b0ec850651c1595aaf83af9a71Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid netty-all Low Vendor pom groupid io.netty Highest Vendor pom name Netty/All-in-One High Vendor pom parent-artifactid netty-parent Low Product pom artifactid netty-all Highest Product pom groupid io.netty Highest Product pom name Netty/All-in-One High Product pom parent-artifactid netty-parent Medium Version pom version 4.1.12.Final Highest
CVE-2019-20444 suppress
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold." CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (6.4) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: CRITICAL (9.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-20445 suppress
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (6.4) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: CRITICAL (9.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-16869 suppress
Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-9518 (OSSINDEX)suppress
Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with an empty payload and without the end-of-stream flag. These frames can be DATA, HEADERS, CONTINUATION and/or PUSH_PROMISE. The peer spends time processing each frame disproportionate to attack bandwidth. This can consume excess CPU. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:io.netty:netty-all:4.1.12.Final:*:*:*:*:*:*:* CVE-2020-11612 suppress
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder. CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-7238 (OSSINDEX)suppress
Netty 4.1.43.Final allows HTTP Request Smuggling because it mishandles Transfer-Encoding whitespace (such as a [space]Transfer-Encoding:chunked line) and a later Content-Length header. This issue exists because of an incomplete fix for CVE-2019-16869. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:io.netty:netty-all:4.1.12.Final:*:*:*:*:*:*:* CVE-2021-37136 suppress
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack CWE-400 Uncontrolled Resource Consumption
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-37137 suppress
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk. CWE-400 Uncontrolled Resource Consumption
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-41881 suppress
Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except using a custom HaProxyMessageDecoder. CWE-674 Uncontrolled Recursion
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2021-43797 suppress
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead to HTTP request smuggling. Failing to do the validation might cause netty to "sanitize" header names before it forward these to another remote system when used as proxy. This remote system can't see the invalid usage anymore, and therefore does not do the validation itself. Users should upgrade to version 4.1.71.Final. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-34462 suppress
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final. CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2021-21295 suppress
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling. In a proxy case, users may assume the content-length is validated somehow, which is not the case. If the request is forwarded to a backend channel that is a HTTP/1.1 connection, the Content-Length now has meaning and needs to be checked. An attacker can smuggle requests inside the body as it gets downgraded from HTTP/2 to HTTP/1.1. For an example attack refer to the linked GitHub Advisory. Users are only affected if all of this is true: `HTTP2MultiplexCodec` or `Http2FrameCodec` is used, `Http2StreamFrameToHttpObjectCodec` is used to convert to HTTP/1.1 objects, and these HTTP/1.1 objects are forwarded to another remote peer. This has been patched in 4.1.60.Final As a workaround, the user can do the validation by themselves by implementing a custom `ChannelInboundHandler` that is put in the `ChannelPipeline` behind `Http2StreamFrameToHttpObjectCodec`. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: LOW (2.6) Vector: /AV:N/AC:H/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-21409 suppress
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-21290 suppress
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method "File.createTempFile" on unix-like systems creates a random file, but, by default will create this file with the permissions "-rw-r--r--". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's "AbstractDiskHttpData" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own "java.io.tmpdir" when you start the JVM or use "DefaultHttpDataFactory.setBaseDir(...)" to set the directory to something that is only readable by the current user. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, CWE-668 Exposure of Resource to Wrong Sphere
CVSSv2:
Base Score: LOW (1.9) Vector: /AV:L/AC:M/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-24823 suppress
Netty is an open-source, asynchronous event-driven network application framework. The package `io.netty:netty-codec-http` prior to version 4.1.77.Final contains an insufficient fix for CVE-2021-21290. When Netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. This only impacts applications running on Java version 6 and lower. Additionally, this vulnerability impacts code running on Unix-like systems, and very old versions of Mac OSX and Windows as they all share the system temporary directory between all users. Version 4.1.77.Final contains a patch for this vulnerability. As a workaround, specify one's own `java.io.tmpdir` when starting the JVM or use DefaultHttpDataFactory.setBaseDir(...) to set the directory to something that is only readable by the current user. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, CWE-668 Exposure of Resource to Wrong Sphere
CVSSv2:
Base Score: LOW (1.9) Vector: /AV:L/AC:M/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Pulls down netty.io, relocates nd then makes a fat new jar with them all in it.
File Path: /home/runner/.m2/repository/org/apache/hbase/thirdparty/hbase-shaded-netty/1.0.1/hbase-shaded-netty-1.0.1.jarMD5: 7bf6194a09c3eb0b5f9658a4b52b78a5SHA1: 59bb59836c904c932b0929e2d9df0fdcf37a6444SHA256: 5136f783b6b23f57c0544b51c5609d38f234103851b39948602f0846cdb3505bReferenced In Project/Scope: shardingsphere-infra-database-hive:providedhbase-shaded-netty-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hbase-shaded-netty High Vendor jar package name apache Highest Vendor jar package name apache Low Vendor jar package name hadoop Low Vendor jar package name hbase Highest Vendor jar package name hbase Low Vendor jar package name shaded Highest Vendor pom artifactid hbase-shaded-netty Highest Vendor pom artifactid hbase-shaded-netty Low Vendor pom groupid org.apache.hbase.thirdparty Highest Vendor pom name Apache HBase Relocated (Shaded) Netty Libs High Vendor pom parent-artifactid hbase-thirdparty Low Product file name hbase-shaded-netty High Product jar package name apache Highest Product jar package name hadoop Low Product jar package name hbase Highest Product jar package name hbase Low Product jar package name shaded Highest Product jar package name shaded Low Product pom artifactid hbase-shaded-netty Highest Product pom groupid org.apache.hbase.thirdparty Highest Product pom name Apache HBase Relocated (Shaded) Netty Libs High Product pom parent-artifactid hbase-thirdparty Medium Version file version 1.0.1 High Version pom version 1.0.1 Highest
Related Dependencies hbase-shaded-miscellaneous-1.0.1.jarFile Path: /home/runner/.m2/repository/org/apache/hbase/thirdparty/hbase-shaded-miscellaneous/1.0.1/hbase-shaded-miscellaneous-1.0.1.jar MD5: 6ce0b70bf79b6ecc5a80c5a389d02a3b SHA1: e919cbc1a88268cd0513c43cd077d018568e7138 SHA256: 450a0acc82860f4083ecd3423a86a02f954df895c81a214bf514b0e589eb5d91 pkg:maven/org.apache.hbase.thirdparty/hbase-shaded-miscellaneous@1.0.1 CVE-2018-8025 suppress
CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be treated as an authenticated user. https://issues.apache.org/jira/browse/HBASE-20664 implements a fix for this issue. It has been fixed in versions: 1.2.6.1, 1.3.2.1, 1.4.5, 2.0.1. CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an
efficient yet extensible format.
File Path: /home/runner/.m2/repository/org/apache/hbase/thirdparty/hbase-shaded-protobuf/1.0.1/hbase-shaded-protobuf-1.0.1.jar/META-INF/maven/com.google.protobuf/protobuf-java/pom.xmlMD5: 0c50fbb29be4135de9c2c10f5a347ec8SHA1: efbca47990d8ca77df886506db2a7744313d246cSHA256: df048f7ab30d8d333ac2d9e34e4fd04decc800cecf491c48eb5b18bf54d4f992Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid protobuf-java Low Vendor pom groupid com.google.protobuf Highest Vendor pom name Protocol Buffers [Core] High Vendor pom parent-artifactid protobuf-parent Low Product pom artifactid protobuf-java Highest Product pom groupid com.google.protobuf Highest Product pom name Protocol Buffers [Core] High Product pom parent-artifactid protobuf-parent Medium Version pom version 3.3.1 Highest
CVE-2022-3171 suppress
A parsing issue with binary data in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above. CWE-20 Improper Input Validation, NVD-CWE-noinfo
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-3509 (OSSINDEX)suppress
A parsing issue similar to CVE-2022-3171, but with textformat in protobuf-java core and lite versions prior to 3.21.7, 3.20.3, 3.19.6 and 3.16.3 can lead to a denial of service attack. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields causes objects to be converted back-n-forth between mutable and immutable forms, resulting in potentially long garbage collection pauses. We recommend updating to the versions mentioned above. CWE-20 Improper Input Validation
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:com.google.protobuf:protobuf-java:3.3.1:*:*:*:*:*:*:* CVE-2021-22569 suppress
An issue in protobuf-java allowed the interleaving of com.google.protobuf.UnknownFieldSet fields in such a way that would be processed out of order. A small malicious payload can occupy the parser for several minutes by creating large numbers of short-lived objects that cause frequent, repeated pauses. We recommend upgrading libraries beyond the vulnerable versions. NVD-CWE-noinfo, CWE-696 Incorrect Behavior Order
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Pulls down protobuf, patches it, compiles, and then relocates/shades.
File Path: /home/runner/.m2/repository/org/apache/hbase/thirdparty/hbase-shaded-protobuf/1.0.1/hbase-shaded-protobuf-1.0.1.jarMD5: 95d339c836103438de92ea1a55ba4f5fSHA1: 0c72a8b47f746aa65e9404b4441d64533b4a14faSHA256: f4d1bb3e24a228443816f960772e6234379f5acd63ec0ad36aee15134703f0b6Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhbase-shaded-protobuf-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hbase-shaded-protobuf High Vendor jar package name apache Highest Vendor jar package name hbase Highest Vendor jar package name shaded Highest Vendor Manifest implementation-url http://hbase.apache.org/hbase-shaded-protobuf Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.hbase.thirdparty Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid hbase-shaded-protobuf Highest Vendor pom artifactid hbase-shaded-protobuf Low Vendor pom groupid org.apache.hbase.thirdparty Highest Vendor pom name Apache HBase Patched & Relocated (Shaded) Protobuf High Vendor pom parent-artifactid hbase-thirdparty Low Product file name hbase-shaded-protobuf High Product jar package name apache Highest Product jar package name hbase Highest Product jar package name shaded Highest Product Manifest Implementation-Title Apache HBase Patched & Relocated (Shaded) Protobuf High Product Manifest implementation-url http://hbase.apache.org/hbase-shaded-protobuf Low Product Manifest specification-title Apache HBase Patched & Relocated (Shaded) Protobuf Medium Product pom artifactid hbase-shaded-protobuf Highest Product pom groupid org.apache.hbase.thirdparty Highest Product pom name Apache HBase Patched & Relocated (Shaded) Protobuf High Product pom parent-artifactid hbase-thirdparty Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
CVE-2018-8025 suppress
CVE-2018-8025 describes an issue in Apache HBase that affects the optional "Thrift 1" API server when running over HTTP. There is a race-condition which could lead to authenticated sessions being incorrectly applied to users, e.g. one authenticated user would be considered a different user or an unauthenticated user would be treated as an authenticated user. https://issues.apache.org/jira/browse/HBASE-20664 implements a fix for this issue. It has been fixed in versions: 1.2.6.1, 1.3.2.1, 1.4.5, 2.0.1. CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: /home/runner/.m2/repository/org/apache/hive/hive-llap-server/3.1.3/hive-llap-server-3.1.3.jarMD5: 0ceafb03e483cd082318289ad12d6d7fSHA1: 2b5079a8a67b91f35cebb1433b24cdcefa3d9b3bSHA256: c985127a618182acff3187b454d9ad3f1859747018f7adfab8e818f0e86b0656Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhive-llap-server-3.1.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hive-llap-server High Vendor jar package name apache Highest Vendor jar package name hive Highest Vendor jar package name llap Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.hive Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid hive-llap-server Highest Vendor pom artifactid hive-llap-server Low Vendor pom groupid org.apache.hive Highest Vendor pom name Hive Llap Server High Vendor pom parent-artifactid hive Low Product file name hive-llap-server High Product jar package name apache Highest Product jar package name hive Highest Product jar package name llap Highest Product Manifest Implementation-Title Hive Llap Server High Product Manifest specification-title Hive Llap Server Medium Product pom artifactid hive-llap-server Highest Product pom groupid org.apache.hive Highest Product pom name Hive Llap Server High Product pom parent-artifactid hive Medium Version file version 3.1.3 High Version Manifest Implementation-Version 3.1.3 High Version pom version 3.1.3 Highest
Related Dependencies hive-classification-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-classification/3.1.3/hive-classification-3.1.3.jar MD5: 8b5e61dd314ab2c10f70200e02cdc731 SHA1: 70b332574395cde2c56db431b619be9823407aed SHA256: ef4428cc7085721992e81d73046d2930349ca8606d2071a3598814f415034469 pkg:maven/org.apache.hive/hive-classification@3.1.3 hive-common-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-common/3.1.3/hive-common-3.1.3.jar MD5: de034b2236dd0cebdb3677d5a3bb5a91 SHA1: 45c3bb7696f29655189abb78ec1c97f511643159 SHA256: a39058a6028ad36a74f97639663c94d9d4c52d9d32fab31032270565d01424af pkg:maven/org.apache.hive/hive-common@3.1.3 hive-jdbc-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-jdbc/3.1.3/hive-jdbc-3.1.3.jar MD5: 6308c4dffdea5665865dd6267c113421 SHA1: a5b6b2f2afbb2b9d5b2bca9396d6e16da8c18edb SHA256: f9fa451cf20598013df335e4328b9580fdec0c3fd72d7149dd2ceadb043be7c6 pkg:maven/org.apache.hive/hive-jdbc@3.1.3 hive-llap-client-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-llap-client/3.1.3/hive-llap-client-3.1.3.jar MD5: bd40ca2db9b9734717d903ddb7ec55af SHA1: 05010e4e8fa0119164827a230ed9d851545e825b SHA256: edece89970f8ab288b7dbc5b3898a0555b29a614d2a0f81848d9ad193f773246 pkg:maven/org.apache.hive/hive-llap-client@3.1.3 hive-llap-common-3.1.3-tests.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-llap-common/3.1.3/hive-llap-common-3.1.3-tests.jar MD5: 4c805338493115f1d84304f15e27a2e8 SHA1: bc138f762cd73d525adec0a4e22c192425085cea SHA256: 3b9ff41f54a3ace1a045b8d5861311ad3373dd48f62d230ce96f5d2cc43bae33 pkg:maven/org.apache.hive/hive-llap-common@3.1.3 hive-llap-common-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-llap-common/3.1.3/hive-llap-common-3.1.3.jar MD5: d68d9bfe26e135be51559fd5090f18ff SHA1: cfe156b119658e2cd05eaeae644965f5312ccf5f SHA256: aa349f789a305ccba037e0ff1185c2a89d20a1e95bea69ac7c207920ad21e877 pkg:maven/org.apache.hive/hive-llap-common@3.1.3 hive-llap-tez-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-llap-tez/3.1.3/hive-llap-tez-3.1.3.jar MD5: 888e01fd5beedaeb7015ced6ed78e712 SHA1: c4c14a3ccc032f8cfa60be9d9615d8bd4191bf5b SHA256: 8fe132497dab70c101b02c1be25142800a0fd5ac7b35b26bc149cbbdd2feb645 pkg:maven/org.apache.hive/hive-llap-tez@3.1.3 hive-metastore-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-metastore/3.1.3/hive-metastore-3.1.3.jar MD5: 3de09aa2c33dcb6ea068658defc1af94 SHA1: 99a1348743f3550dd4524408725efab8eb319960 SHA256: 6af6ec693134e7db237ec2cc20a3cbd0e49834021fc989446fd61068d0331bf9 pkg:maven/org.apache.hive/hive-metastore@3.1.3 hive-shims-0.23-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/shims/hive-shims-0.23/3.1.3/hive-shims-0.23-3.1.3.jar MD5: 0fcc1a017f8ccf5fb4eb60407883bc58 SHA1: 28bdcdcceb92a1ac450b8b6a3d3d0627d839054d SHA256: 586595d5fc5be90f0b52645f2d912a0a4cc1f148756dda3c8a2c8f38dce5f487 pkg:maven/org.apache.hive.shims/hive-shims-0.23@3.1.3 hive-shims-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-shims/3.1.3/hive-shims-3.1.3.jar MD5: 6b21da36db390393738bae907e10ba66 SHA1: acc766c65cd4e94a5e1fab6a2f85148dfc8613d8 SHA256: aa845f06da6baa1a928cb3cf82e46979ee15eea8b1dd4acdbdba69bc475b8e50 pkg:maven/org.apache.hive/hive-shims@3.1.3 hive-shims-common-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/shims/hive-shims-common/3.1.3/hive-shims-common-3.1.3.jar MD5: 0a7a5b1f0949123ce786c7f2ff94b5f5 SHA1: 9ea12cb2c426d521b7c4cad5b02ce18e5b614d4e SHA256: 86d60b313a997705e26d75d32af46d50aa92538186167e5732765a2fd7ce4439 pkg:maven/org.apache.hive.shims/hive-shims-common@3.1.3 hive-shims-scheduler-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/shims/hive-shims-scheduler/3.1.3/hive-shims-scheduler-3.1.3.jar MD5: 3fb9227e9f94e0bc558787ec6643f25a SHA1: 8347ef8861b75bbffcaebb706a0ae296daabc20e SHA256: b8329cd11dd28f7cb154a4a9d2ad0de20dc16b7b80e43fa70263bdf2499c4448 pkg:maven/org.apache.hive.shims/hive-shims-scheduler@3.1.3 hive-standalone-metastore-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-standalone-metastore/3.1.3/hive-standalone-metastore-3.1.3.jar MD5: c6a0c4ee84d412faabdb38851412339f SHA1: e844c4278ecba985c08e0dea1181343a07c04c3e SHA256: 779d11d856d9f41b5f78658fdf7ddf1626f03c7ae5d808582484c3744597a1f3 pkg:maven/org.apache.hive/hive-standalone-metastore@3.1.3 hive-upgrade-acid-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-upgrade-acid/3.1.3/hive-upgrade-acid-3.1.3.jar MD5: d56d8946726be74cf46025dff45d8283 SHA1: 1d7200e19d1ffdaf6927ff0be701724c85be07d7 SHA256: 162e452c2fe8c5f7f6a4c68555fc58277dae37916748789f2dbd2e90aa8793a0 pkg:maven/org.apache.hive/hive-upgrade-acid@3.1.3 CVE-2020-13949 suppress
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. CWE-400 Uncontrolled Resource Consumption
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: /home/runner/.m2/repository/org/apache/hive/hive-llap-server/3.1.3/hive-llap-server-3.1.3.jar/hive-webapps/llap/js/jquery.min.jsMD5: a09e13ee94d51c524b7e2a728c7d4039SHA1: 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aaeSHA256: 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02efReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name jquery High Product file name jquery High Version file version 3.3.1 High
Related Dependencies hive-service-3.1.3.jar: jquery.min.jsFile Path: /home/runner/.m2/repository/org/apache/hive/hive-service/3.1.3/hive-service-3.1.3.jar/hive-webapps/static/js/jquery.min.js MD5: a09e13ee94d51c524b7e2a728c7d4039 SHA1: 0dc32db4aa9c5f03f3b38c47d883dbd4fed13aae SHA256: 160a426ff2894252cd7cebbdd6d6b7da8fcd319c65b70468f10b6690c45d02ef pkg:javascript/jquery@3.3.1 CVE-2019-11358 suppress
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
cve@mitre.org - BROKEN_LINK,THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY info - https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/ info - https://github.com/jquery/jquery/commit/753d591aea698e57d6db58c9f722cd0808619b1b info - https://nvd.nist.gov/vuln/detail/CVE-2019-11358 Vulnerable Software & Versions (NVD):
cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* versions from (including) 1.11.0; versions up to (excluding) 1.11.9 cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* versions from (including) 1.12.0; versions up to (excluding) 1.12.6 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.66 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.5.0; versions up to (excluding) 8.5.15 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.6.0; versions up to (excluding) 8.6.15 cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* versions from (including) 3.0.0; versions up to (including) 3.9.4 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions up to (excluding) 3.4.0 cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 19.1 cpe:2.3:a:oracle:application_service_level_management:13.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_service_level_management:13.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* versions from (including) 2.7.0; versions up to (including) 2.8.0 cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* versions from (including) 2.4.0; versions up to (including) 2.10.0 cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* versions from (including) 6.0; versions up to (including) 6.4 cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* versions from (including) 4.1; versions up to (including) 4.3 cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_operations_monitor:4.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:diagnostic_assistant:2.12.36:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 7.3.3; versions up to (including) 7.3.5 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.2; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:* versions from (including) 8.0.5; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* versions from (including) 8.0.2; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:financial_services_retail_customer_analytics:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.6 cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* versions from (including) 19.1.0; versions up to (including) 19.1.2 cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.4; versions up to (including) 8.0.7 cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* versions from (including) 5.0.0.0; versions up to (including) 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_performance_insight:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:knowledge:*:*:*:*:*:*:*:* versions from (including) 8.6.0; versions up to (including) 8.6.3 cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.15 cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.15 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2.0; versions up to (including) 16.2.11 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0; versions up to (including) 17.12.7 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0; versions up to (including) 18.8.9 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0; versions up to (including) 19.12.4 cpe:2.3:a:oracle:primavera_gateway:15.2.18:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* versions from (including) 17.7; versions up to (including) 17.12 cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:real-time_scheduler:*:*:*:*:*:*:*:* versions from (including) 2.3.0.1; versions up to (including) 2.3.0.3 cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:siebel_mobile_applications:*:*:*:*:*:*:*:* versions up to (including) 19.8 cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:system_utilities:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:tape_library_acsls:8.5:*:*:*:*:*:*:* cpe:2.3:a:oracle:tape_library_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:transportation_management:1.4.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:utilities_mobile_workforce_management:*:*:*:*:*:*:*:* versions from (including) 2.3.0.1; versions up to (including) 2.3.0.3 cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:* cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:* CVE-2020-11022 suppress
In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - MITIGATION,THIRD_PARTY_ADVISORY security-advisories@github.com - MITIGATION,VENDOR_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.70 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.7.0; versions up to (excluding) 8.7.14 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.8.0; versions up to (excluding) 8.8.6 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions from (including) 1.2; versions up to (excluding) 3.5.0 cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:agile_product_supplier_collaboration_for_process:6.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:* versions from (including) 18.1; versions up to (including) 20.1 cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:* versions up to (excluding) 21.1.2 cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_diameter_signaling_router_idih\::*:*:*:*:*:*:*:* versions from (including) 8.0.0; versions up to (including) 8.2.2 cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* versions from (including) 8.0.6.0.0; versions up to (including) 8.1.0.0.0 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_integration_hub:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.8 cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.0.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.0.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.0.9 cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* versions from (including) 19.1.0; versions up to (including) 19.1.2 cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:hospitality_simphony:19.1.0-19.1.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* versions from (including) 8.0.6; versions up to (including) 8.1.0 cpe:2.3:a:oracle:insurance_data_foundation:8.0.6-8.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* versions from (including) 5.0.0.0; versions up to (including) 5.6.0.0 cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.20 cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:* cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:* versions from (including) 12.2.0; versions up to (including) 12.2.20 cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.9 CVE-2020-11023 suppress
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
info - https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/ security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK security-advisories@github.com - BROKEN_LINK,MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - EXPLOIT,THIRD_PARTY_ADVISORY,VDB_ENTRY security-advisories@github.com - MAILING_LIST,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - PATCH,THIRD_PARTY_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - RELEASE_NOTES,VENDOR_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY security-advisories@github.com - THIRD_PARTY_ADVISORY Vulnerable Software & Versions (NVD):
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 7.0; versions up to (excluding) 7.70 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.7.0; versions up to (excluding) 8.7.14 cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* versions from (including) 8.8.0; versions up to (excluding) 8.8.6 cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* versions from (including) 1.0.3; versions up to (excluding) 3.5.0 cpe:2.3:a:netapp:max_data:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* versions from (including) 3.0; versions up to (including) 3.1.3 cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:* cpe:2.3:a:netapp:snapcenter_server:-:*:*:*:*:*:*:* cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* versions up to (excluding) 20.2 cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* versions from (including) 2.7.0; versions up to (including) 2.8.0 cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* versions from (including) 2.4.0; versions up to (including) 2.10.0 cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:* cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* versions from (including) 16.1.0; versions up to (including) 16.4.0 cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* versions from (including) 6.1; versions up to (including) 6.4 cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* versions from (including) 4.1; versions up to (including) 4.3 cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.7:*:*:*:*:*:*:* cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8:*:*:*:*:*:*:* cpe:2.3:a:oracle:health_sciences_inform:6.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:* cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:* versions up to (excluding) 9.2.5.0 cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:* versions up to (excluding) 9.2.5.0 cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:* versions up to (excluding) 2.12.41 cpe:2.3:a:oracle:peoplesoft_enterprise_human_capital_management_resources:9.2:*:*:*:*:*:*:* cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 16.2; versions up to (including) 16.2.11 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 17.12.0; versions up to (including) 17.12.7 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 18.8.0; versions up to (including) 18.8.9 cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* versions from (including) 19.12.0; versions up to (including) 19.12.4 cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* cpe:2.3:a:oracle:siebel_mobile:*:*:*:*:*:*:*:* versions up to (including) 20.12 cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:* versions up to (excluding) 6.0.9 File Path: /home/runner/.m2/repository/org/apache/hive/hive-llap-server/3.1.3/hive-llap-server-3.1.3.jar/hive-webapps/llap/js/jquery.sparkline.min.jsMD5: 56be28a1645466dc675d2a204fca015cSHA1: 7e3cc75c9facc4ef22dc14002ee79e0976cc0130SHA256: 06e0242da172ab85985db3774c54ac1b53391a5b447857a100c5118b8281a543Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
File Path: /home/runner/.m2/repository/org/apache/hive/hive-llap-server/3.1.3/hive-llap-server-3.1.3.jar/hive-webapps/llap/js/metrics.jsMD5: 60f9b036e026723d0261e0338c55440bSHA1: fb396a6c1fb9f65422d77dd41e9121e6f12a27dbSHA256: b03cca22d71514debc7c986afaf0e09095e12adf6079eba37977b8c61ad850c3Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
File Path: /home/runner/.m2/repository/org/apache/hive/hive-service/3.1.3/hive-service-3.1.3.jarMD5: a4559649096e422a085caf2ede4c64beSHA1: 49fd7ad46801a895d2b185706637a8cb302fc044SHA256: 3db78481491d28a332ef9bcf0951e2ef2d681bbf14c9066424fa5e2ac0a6fa8aReferenced In Project/Scope: shardingsphere-infra-database-hive:providedhive-service-3.1.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hive-service High Vendor jar package name apache Highest Vendor jar package name hive Highest Vendor jar package name service Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.hive Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid hive-service Highest Vendor pom artifactid hive-service Low Vendor pom groupid org.apache.hive Highest Vendor pom name Hive Service High Vendor pom parent-artifactid hive Low Product file name hive-service High Product jar package name apache Highest Product jar package name hive Highest Product jar package name service Highest Product Manifest Implementation-Title Hive Service High Product Manifest specification-title Hive Service Medium Product pom artifactid hive-service Highest Product pom groupid org.apache.hive Highest Product pom name Hive Service High Product pom parent-artifactid hive Medium Version file version 3.1.3 High Version Manifest Implementation-Version 3.1.3 High Version pom version 3.1.3 Highest
Related Dependencies hive-service-rpc-3.1.3.jarFile Path: /home/runner/.m2/repository/org/apache/hive/hive-service-rpc/3.1.3/hive-service-rpc-3.1.3.jar MD5: a26beb7032c82e6aac9d081cab06a48f SHA1: 98db04145db86e31aa83f633f8805d528732caa0 SHA256: 47c97540960fa413e97a251656330934d9d4424e15691b80b2dcc524cf8ca4f1 pkg:maven/org.apache.hive/hive-service-rpc@3.1.3 CVE-2020-13949 suppress
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. CWE-400 Uncontrolled Resource Consumption
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: /home/runner/.m2/repository/org/apache/hive/hive-service/3.1.3/hive-service-3.1.3.jar/hive-webapps/static/js/json.human.jsMD5: a74f8de10c478652a15c9087d329b268SHA1: b7de619c46055558f536ee7f0cab943a5dae63bcSHA256: e28a4aa2f65e0a0f8c581f15751ea2e5d9b12f14325d99cc26e016126f4f59f8Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
File Path: /home/runner/.m2/repository/org/apache/hive/hive-service/3.1.3/hive-service-3.1.3.jar/hive-webapps/static/js/llap.jsMD5: 2a4635231f7c514abf5a64adeb486680SHA1: d654a7489ce9a5bdbb38364cb46507b30b90eb1dSHA256: bd43fda8cc21d2a1b55de22a63d16a629a3c9efee874192d4a81085fdbd876a3Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
File Path: /home/runner/.m2/repository/org/apache/hive/hive-service/3.1.3/hive-service-3.1.3.jar/hive-webapps/static/js/tab.jsMD5: cef53fbb05fa8074831fc69c47ab66c2SHA1: 085f9fc811703174bb9c4868d79b7c51c5b5d6a4SHA256: 499221a4bd56812148cb3d51dc9f81552aa4e2a0307fa033eb80af0012c0804dReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence
File Path: /home/runner/.m2/repository/org/apache/hive/hive-storage-api/2.7.0/hive-storage-api-2.7.0.jarMD5: 821e536501899ed9c47c38c24bd8e2fbSHA1: b67545f02e4f821fa154f019ace439d98de715d5SHA256: b764dfada0b3320b4899d854e5ba4c82a9dc96bbc73bcb79e7734a25275d27bdReferenced In Project/Scope: shardingsphere-infra-database-hive:providedhive-storage-api-2.7.0.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name hive-storage-api High Vendor jar package name apache Highest Vendor jar package name hive Highest Vendor Manifest implementation-url https://www.apache.org/hive-storage-api/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.hive Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid hive-storage-api Highest Vendor pom artifactid hive-storage-api Low Vendor pom groupid org.apache.hive Highest Vendor pom name Hive Storage API High Vendor pom parent-artifactid apache Low Vendor pom parent-groupid org.apache Medium Product file name hive-storage-api High Product jar package name apache Highest Product jar package name hive Highest Product Manifest Implementation-Title Hive Storage API High Product Manifest implementation-url https://www.apache.org/hive-storage-api/ Low Product Manifest specification-title Hive Storage API Medium Product pom artifactid hive-storage-api Highest Product pom groupid org.apache.hive Highest Product pom name Hive Storage API High Product pom parent-artifactid apache Medium Product pom parent-groupid org.apache Medium Version file version 2.7.0 High Version Manifest Implementation-Version 2.7.0 High Version pom parent-version 2.7.0 Low Version pom version 2.7.0 Highest
CVE-2021-34538 suppress
Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization of involved entities in the query. It was found that an unauthorized user can manipulate an existing UDF without having the privileges to do so. This allowed unauthorized or underprivileged users to drop and recreate UDFs pointing them to new jars that could be potentially malicious. CWE-306 Missing Authentication for Critical Function
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
${project.name} License:
https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-api/2.5.0-b32/hk2-api-2.5.0-b32.jar
MD5: 93322931c4ec277c5190c7cddf7ad155
SHA1: 6a576c9653832ce610b80a2f389374ef19d96171
SHA256: b3fe4f295ab8e74ea9d641717dc55e5768f1e5db3709e84235346a4d6bcde5c2
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
hk2-api-2.5.0-b32.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name hk2-api High Vendor jar package name api Highest Vendor jar package name glassfish Highest Vendor jar package name hk2 Highest Vendor Manifest bundle-docurl http://www.oracle.com Low Vendor Manifest bundle-symbolicname org.glassfish.hk2.api Medium Vendor pom artifactid hk2-api Highest Vendor pom artifactid hk2-api Low Vendor pom groupid org.glassfish.hk2 Highest Vendor pom name HK2 API module High Vendor pom parent-artifactid hk2-parent Low Product file name hk2-api High Product jar package name api Highest Product jar package name glassfish Highest Product jar package name hk2 Highest Product Manifest bundle-docurl http://www.oracle.com Low Product Manifest Bundle-Name HK2 API module Medium Product Manifest bundle-symbolicname org.glassfish.hk2.api Medium Product pom artifactid hk2-api Highest Product pom groupid org.glassfish.hk2 Highest Product pom name HK2 API module High Product pom parent-artifactid hk2-parent Medium Version pom version 2.5.0-b32 Highest
Description:
${project.name} License:
https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-locator/2.5.0-b32/hk2-locator-2.5.0-b32.jar
MD5: 5baf0f144cf8552a9fe476b096fc18a7
SHA1: 195474f8ad0a8d130e9ea949a771bcf1215fc33b
SHA256: 27cacf80e8c088cc50f73b56344b779bdb7418e590a037659ab66b2b0cd9c492
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
hk2-locator-2.5.0-b32.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name hk2-locator High Vendor jar package name hk2 Highest Vendor Manifest bundle-docurl http://www.oracle.com Low Vendor Manifest bundle-symbolicname org.glassfish.hk2.locator Medium Vendor pom artifactid hk2-locator Highest Vendor pom artifactid hk2-locator Low Vendor pom groupid org.glassfish.hk2 Highest Vendor pom name ServiceLocator Default Implementation High Vendor pom parent-artifactid hk2-parent Low Product file name hk2-locator High Product jar package name hk2 Highest Product Manifest bundle-docurl http://www.oracle.com Low Product Manifest Bundle-Name ServiceLocator Default Implementation Medium Product Manifest bundle-symbolicname org.glassfish.hk2.locator Medium Product pom artifactid hk2-locator Highest Product pom groupid org.glassfish.hk2 Highest Product pom name ServiceLocator Default Implementation High Product pom parent-artifactid hk2-parent Medium Version pom version 2.5.0-b32 Highest
File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-utils/2.5.0-b32/hk2-utils-2.5.0-b32.jar/META-INF/maven/org.jvnet/tiger-types/pom.xmlMD5: 51329dba505e7cc4a9bc2719cf195be0SHA1: 5855a7ee03b816073c2b448bce93319bd71f7029SHA256: 58794aca99cadb3aab687b56fd6d84871956590323dd0ea5d611db759e78c6b9Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid tiger-types Low Vendor pom groupid org.jvnet Highest Vendor pom name Type arithmetic library for Java5 High Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Product pom artifactid tiger-types Highest Product pom groupid org.jvnet Highest Product pom name Type arithmetic library for Java5 High Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Version pom parent-version 1.4 Low Version pom version 1.4 Highest
Description:
${project.name} License:
https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/org/glassfish/hk2/hk2-utils/2.5.0-b32/hk2-utils-2.5.0-b32.jar
MD5: acc873aece4f8e89814ac0300b549e3e
SHA1: 5108a926988c4ceda7f1e681dddfe3101454a002
SHA256: 3912c470e621eb3e469c111f4c9a4dee486e2ce9db09a65b7609e006b6c3d38e
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
hk2-utils-2.5.0-b32.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name hk2-utils High Vendor jar package name glassfish Highest Vendor jar package name hk2 Highest Vendor jar package name utilities Highest Vendor Manifest bundle-docurl http://www.oracle.com Low Vendor Manifest bundle-symbolicname org.glassfish.hk2.utils Medium Vendor Manifest originally-created-by Apache Maven Low Vendor Manifest service foo Low Vendor pom artifactid hk2-utils Highest Vendor pom artifactid hk2-utils Low Vendor pom groupid org.glassfish.hk2 Highest Vendor pom name HK2 Implementation Utilities High Vendor pom parent-artifactid hk2-parent Low Product file name hk2-utils High Product jar package name glassfish Highest Product jar package name hk2 Highest Product jar package name utilities Highest Product Manifest bundle-docurl http://www.oracle.com Low Product Manifest Bundle-Name HK2 Implementation Utilities Medium Product Manifest bundle-symbolicname org.glassfish.hk2.utils Medium Product Manifest originally-created-by Apache Maven Low Product Manifest service foo Low Product pom artifactid hk2-utils Highest Product pom groupid org.glassfish.hk2 Highest Product pom name HK2 Implementation Utilities High Product pom parent-artifactid hk2-parent Medium Version pom version 2.5.0-b32 Highest
Description:
Core Jackson abstractions, basic JSON streaming API implementation
File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core/3.2.0-incubating/htrace-core-3.2.0-incubating.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.xmlMD5: b5ed6cb7f987a4da86141638b1538d81SHA1: ed8235ea6d84480833675e709b415bde24ce25f7SHA256: 8310978da8c7013ecaaba13c9b41b75ab3a09797ae4b946ae5e1614088f995d7Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid jackson-core Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name Jackson-core High Vendor pom parent-artifactid jackson-parent Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url http://wiki.fasterxml.com/JacksonHome Highest Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product pom artifactid jackson-core Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name Jackson-core High Product pom parent-artifactid jackson-parent Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url http://wiki.fasterxml.com/JacksonHome Medium Version pom parent-version 2.4.0 Low Version pom version 2.4.0 Highest
Related Dependencies htrace-core-3.2.0-incubating.jar (shaded: com.fasterxml.jackson.core:jackson-annotations:2.4.0)File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core/3.2.0-incubating/htrace-core-3.2.0-incubating.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-annotations/pom.xml MD5: 556310b593b9688b85686409e0bd5377 SHA1: 2b75fa41636e5d02edc961ee9c68e6f041dc85a9 SHA256: 63e2e01157c8964913ef8bb0e69cec0d363d31129089206f7fb07ee5438359c0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0 htrace-core4-4.1.0-incubating.jar (shaded: com.fasterxml.jackson.core:jackson-annotations:2.4.0)File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core4/4.1.0-incubating/htrace-core4-4.1.0-incubating.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-annotations/pom.xml MD5: 556310b593b9688b85686409e0bd5377 SHA1: 2b75fa41636e5d02edc961ee9c68e6f041dc85a9 SHA256: 63e2e01157c8964913ef8bb0e69cec0d363d31129089206f7fb07ee5438359c0 pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.4.0 htrace-core4-4.1.0-incubating.jar (shaded: com.fasterxml.jackson.core:jackson-core:2.4.0)File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core4/4.1.0-incubating/htrace-core4-4.1.0-incubating.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-core/pom.xml MD5: b5ed6cb7f987a4da86141638b1538d81 SHA1: ed8235ea6d84480833675e709b415bde24ce25f7 SHA256: 8310978da8c7013ecaaba13c9b41b75ab3a09797ae4b946ae5e1614088f995d7 pkg:maven/com.fasterxml.jackson.core/jackson-core@2.4.0 CVE-2018-1000873 suppress
Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
General data-binding functionality for Jackson: works on core streaming API File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core/3.2.0-incubating/htrace-core-3.2.0-incubating.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-databind/pom.xmlMD5: d3f7afe903419aa0c03f9cf8682e1a69SHA1: 3c0d06b6c0a9f4135fcf5c5557c751c0cd066c0cSHA256: 083be927bdddaf1e992d0e9f0fff509b60f35deea307216d8ba773f065a6f30cReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid jackson-databind Low Vendor pom groupid com.fasterxml.jackson.core Highest Vendor pom name jackson-databind High Vendor pom parent-artifactid jackson-parent Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url http://wiki.fasterxml.com/JacksonHome Highest Product hint analyzer product java8 Highest Product hint analyzer product modules Highest Product pom artifactid jackson-databind Highest Product pom groupid com.fasterxml.jackson.core Highest Product pom name jackson-databind High Product pom parent-artifactid jackson-parent Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url http://wiki.fasterxml.com/JacksonHome Medium Version pom parent-version 2.4.0 Low Version pom version 2.4.0 Highest
Related Dependencies htrace-core4-4.1.0-incubating.jar (shaded: com.fasterxml.jackson.core:jackson-databind:2.4.0)File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core4/4.1.0-incubating/htrace-core4-4.1.0-incubating.jar/META-INF/maven/com.fasterxml.jackson.core/jackson-databind/pom.xml MD5: d3f7afe903419aa0c03f9cf8682e1a69 SHA1: 3c0d06b6c0a9f4135fcf5c5557c751c0cd066c0c SHA256: 083be927bdddaf1e992d0e9f0fff509b60f35deea307216d8ba773f065a6f30c pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.4.0 CVE-2017-15095 suppress
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously. CWE-502 Deserialization of Untrusted Data, CWE-184 Incomplete List of Disallowed Inputs
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
secalert@redhat.com - ISSUE_TRACKING,PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - ISSUE_TRACKING,THIRD_PARTY_ADVISORY secalert@redhat.com - MAILING_LIST,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY,VDB_ENTRY secalert@redhat.com - THIRD_PARTY_ADVISORY,VDB_ENTRY Vulnerable Software & Versions: (show all )
CVE-2017-17485 suppress
FasterXML jackson-databind through 2.8.10 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the Spring libraries are available in the classpath. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7525 suppress
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. CWE-502 Deserialization of Untrusted Data, CWE-184 Incomplete List of Disallowed Inputs
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
OSSINDEX - [CVE-2017-7525] CWE-184: Incomplete Blacklist OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2017-7525 OSSIndex - https://blog.sonatype.com/jackson-databind-remote-code-execution OSSIndex - https://blog.sonatype.com/jackson-databind-the-end-of-the-blacklist OSSIndex - https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-7525 OSSIndex - https://github.com/FasterXML/jackson-databind/issues/1599 secalert@redhat.com - ISSUE_TRACKING,PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - ISSUE_TRACKING,THIRD_PARTY_ADVISORY secalert@redhat.com - ISSUE_TRACKING,THIRD_PARTY_ADVISORY secalert@redhat.com - MAILING_LIST,THIRD_PARTY_ADVISORY secalert@redhat.com - MAILING_LIST,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - PATCH,THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY secalert@redhat.com - THIRD_PARTY_ADVISORY,VDB_ENTRY secalert@redhat.com - THIRD_PARTY_ADVISORY,VDB_ENTRY secalert@redhat.com - THIRD_PARTY_ADVISORY,VDB_ENTRY secalert@redhat.com - THIRD_PARTY_ADVISORY,VDB_ENTRY Vulnerable Software & Versions: (show all )
CVE-2018-11307 suppress
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-14718 suppress
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,VDB_ENTRY Vulnerable Software & Versions: (show all )
CVE-2018-14719 suppress
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - ISSUE_TRACKING,MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2018-7489 suppress
FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath. CWE-502 Deserialization of Untrusted Data, CWE-184 Incomplete List of Disallowed Inputs
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-14379 suppress
SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code execution. CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-14540 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-14892 suppress
A flaw was discovered in jackson-databind in versions before 2.9.10, 2.8.11.5 and 2.6.7.3, where it would permit polymorphic deserialization of a malicious object using commons-configuration 1 and 2 JNDI classes. An attacker could use this flaw to execute arbitrary code. CWE-502 Deserialization of Untrusted Data, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-16335 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-16942 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the commons-dbcp (1.4) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of org.apache.commons.dbcp.datasources.SharedPoolDataSource and org.apache.commons.dbcp.datasources.PerUserPoolDataSource mishandling. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-16943 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an attacker can find an RMI service endpoint to access, it is possible to make the service execute a malicious payload. This issue exists because of com.p6spy.engine.spy.P6DataSource mishandling. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-17267 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-17531 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in the classpath, and an attacker can provide a JNDI service to access, it is possible to make the service execute a malicious payload. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-20330 suppress
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-8840 suppress
FasterXML jackson-databind 2.0.0 through 2.9.10.2 lacks certain xbean-reflect/JNDI blocking, as demonstrated by org.apache.xbean.propertyeditor.JndiConverter. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-9547 suppress
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap). CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-9548 suppress
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core). CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-10673 suppress
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus). CWE-502 Deserialization of Untrusted Data, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-5968 suppress
FasterXML jackson-databind through 2.8.11 and 2.9.x through 2.9.3 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 and CVE-2017-17485 deserialization flaws. This is exploitable via two different gadgets that bypass a blacklist. CWE-502 Deserialization of Untrusted Data, CWE-184 Incomplete List of Disallowed Inputs
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-10650 suppress
A deserialization flaw was discovered in jackson-databind through 2.9.10.4. It could allow an unauthenticated user to perform code execution via ignite-jta or quartz-core: org.apache.ignite.cache.jta.jndi.CacheJndiTmLookup, org.apache.ignite.cache.jta.jndi.CacheJndiTmFactory, and org.quartz.utils.JNDIConnectionProvider. CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-24616 suppress
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP). CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-24750 suppress
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-35490 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-35491 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36179 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36180 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36181 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36182 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36183 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36184 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36185 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36186 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36187 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36188 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36189 suppress
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-20190 suppress
A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (8.3) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:C CVSSv3:
Base Score: HIGH (8.1) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12022 suppress
An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled (either globally or for a specific property), the service has the Jodd-db jar (for database access for the Jodd framework) in the classpath, and an attacker can provide an LDAP service to access, it is possible to make the service execute a malicious payload. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (5.1) Vector: /AV:N/AC:H/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:1.6/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-12086 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-14439 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-36518 suppress
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects. CWE-787 Out-of-bounds Write
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-42003 suppress
In FasterXML jackson-databind before versions 2.13.4.1 and 2.12.17.1, resource exhaustion can occur because of a lack of a check in primitive value deserializers to avoid deep wrapper array nesting, when the UNWRAP_SINGLE_VALUE_ARRAYS feature is enabled. CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-42004 suppress
In FasterXML jackson-databind before 2.13.4, resource exhaustion can occur because of a lack of a check in BeanDeserializer._deserializeFromArray to prevent use of deeply nested arrays. An application is vulnerable only with certain customized choices for deserialization. CWE-502 Deserialization of Untrusted Data
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-1000873 suppress
Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-12384 suppress
FasterXML jackson-databind 2.x before 2.9.9.1 might allow attackers to have a variety of impacts by leveraging failure to block the logback-core class from polymorphic deserialization. Depending on the classpath content, remote code execution may be possible. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-12814 suppress
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x through 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has JDOM 1.x or 2.x jar in the classpath, an attacker can send a specifically crafted JSON message that allows them to read arbitrary local files on the server. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-35116 suppress
jackson-databind through 2.15.2 allows attackers to cause a denial of service or other unspecified impact via a crafted object that uses cyclic dependencies. NOTE: the vendor's perspective is that this is not a valid vulnerability report, because the steps of constructing a cyclic data structure and trying to serialize it cannot be achieved by an external attacker. CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (4.7) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H/E:1.0/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
Commons Logging is a thin adapter allowing configurable bridging to other,
well known logging systems. File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core/3.2.0-incubating/htrace-core-3.2.0-incubating.jar/META-INF/maven/commons-logging/commons-logging/pom.xmlMD5: 976d812430b8246deeaf2ea54610f263SHA1: 76672afb562b9e903674ad3a544cdf2092f1faa3SHA256: d0f2e16d054e8bb97add9ca26525eb2346f692809fcd2a28787da8ceb3c35ee8Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid commons-logging Low Vendor pom developer email baliuka@apache.org Low Vendor pom developer email costin at apache dot org Low Vendor pom developer email craigmcc at apache org Low Vendor pom developer email dennisl@apache.org Low Vendor pom developer email donaldp at apache dot org Low Vendor pom developer email morgand at apache dot org Low Vendor pom developer email rdonkin at apache dot org Low Vendor pom developer email rsitze at apache dot org Low Vendor pom developer email rwaldhoff at apache org Low Vendor pom developer email sanders at apache dot org Low Vendor pom developer email skitching@apache.org Low Vendor pom developer id baliuka Medium Vendor pom developer id bstansberry Medium Vendor pom developer id costin Medium Vendor pom developer id craigmcc Medium Vendor pom developer id dennisl Medium Vendor pom developer id donaldp Medium Vendor pom developer id morgand Medium Vendor pom developer id rdonkin Medium Vendor pom developer id rsitze Medium Vendor pom developer id rwaldhoff Medium Vendor pom developer id sanders Medium Vendor pom developer id skitching Medium Vendor pom developer name Brian Stansberry Medium Vendor pom developer name Costin Manolache Medium Vendor pom developer name Craig McClanahan Medium Vendor pom developer name Dennis Lundberg Medium Vendor pom developer name Juozas Baliuka Medium Vendor pom developer name Morgan Delagrange Medium Vendor pom developer name Peter Donald Medium Vendor pom developer name Richard Sitze Medium Vendor pom developer name Robert Burrell Donkin Medium Vendor pom developer name Rodney Waldhoff Medium Vendor pom developer name Scott Sanders Medium Vendor pom developer name Simon Kitching Medium Vendor pom developer org Apache Medium Vendor pom developer org Apache Software Foundation Medium Vendor pom groupid commons-logging Highest Vendor pom name Commons Logging High Vendor pom parent-artifactid commons-parent Low Vendor pom parent-groupid org.apache.commons Medium Vendor pom url http://commons.apache.org/logging Highest Product pom artifactid commons-logging Highest Product pom developer email baliuka@apache.org Low Product pom developer email costin at apache dot org Low Product pom developer email craigmcc at apache org Low Product pom developer email dennisl@apache.org Low Product pom developer email donaldp at apache dot org Low Product pom developer email morgand at apache dot org Low Product pom developer email rdonkin at apache dot org Low Product pom developer email rsitze at apache dot org Low Product pom developer email rwaldhoff at apache org Low Product pom developer email sanders at apache dot org Low Product pom developer email skitching@apache.org Low Product pom developer id baliuka Low Product pom developer id bstansberry Low Product pom developer id costin Low Product pom developer id craigmcc Low Product pom developer id dennisl Low Product pom developer id donaldp Low Product pom developer id morgand Low Product pom developer id rdonkin Low Product pom developer id rsitze Low Product pom developer id rwaldhoff Low Product pom developer id sanders Low Product pom developer id skitching Low Product pom developer name Brian Stansberry Low Product pom developer name Costin Manolache Low Product pom developer name Craig McClanahan Low Product pom developer name Dennis Lundberg Low Product pom developer name Juozas Baliuka Low Product pom developer name Morgan Delagrange Low Product pom developer name Peter Donald Low Product pom developer name Richard Sitze Low Product pom developer name Robert Burrell Donkin Low Product pom developer name Rodney Waldhoff Low Product pom developer name Scott Sanders Low Product pom developer name Simon Kitching Low Product pom developer org Apache Low Product pom developer org Apache Software Foundation Low Product pom groupid commons-logging Highest Product pom name Commons Logging High Product pom parent-artifactid commons-parent Medium Product pom parent-groupid org.apache.commons Medium Product pom url http://commons.apache.org/logging Medium Version pom parent-version 1.1.1 Low Version pom version 1.1.1 Highest
Related Dependencies htrace-core4-4.1.0-incubating.jar (shaded: commons-logging:commons-logging:1.1.1)File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core4/4.1.0-incubating/htrace-core4-4.1.0-incubating.jar/META-INF/maven/commons-logging/commons-logging/pom.xml MD5: 976d812430b8246deeaf2ea54610f263 SHA1: 76672afb562b9e903674ad3a544cdf2092f1faa3 SHA256: d0f2e16d054e8bb97add9ca26525eb2346f692809fcd2a28787da8ceb3c35ee8 pkg:maven/commons-logging/commons-logging@1.1.1 File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core/3.2.0-incubating/htrace-core-3.2.0-incubating.jarMD5: 0b1b1a63aca83a11545de49218a251bfSHA1: 8797cf3230f01e8724ef27a0ed565dabb6998c64SHA256: 508be2770ef8e83b5c32e19bb56d3fba2ee33c12f7fba25293582ad1595e30bbReferenced In Project/Scope: shardingsphere-infra-database-hive:providedhtrace-core-3.2.0-incubating.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name htrace-core High Vendor jar package name apache Highest Vendor jar package name htrace Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.htrace Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid htrace-core Highest Vendor pom artifactid htrace-core Low Vendor pom groupid org.apache.htrace Highest Vendor pom name htrace-core High Vendor pom parent-artifactid htrace Low Vendor pom url http://incubator.apache.org/projects/htrace.html Highest Product file name htrace-core High Product jar package name apache Highest Product jar package name htrace Highest Product Manifest Implementation-Title htrace-core High Product Manifest specification-title htrace-core Medium Product pom artifactid htrace-core Highest Product pom groupid org.apache.htrace Highest Product pom name htrace-core High Product pom parent-artifactid htrace Medium Product pom url http://incubator.apache.org/projects/htrace.html Medium Version Manifest Implementation-Version 3.2.0-incubating High Version pom version 3.2.0-incubating Highest
File Path: /home/runner/.m2/repository/org/apache/htrace/htrace-core4/4.1.0-incubating/htrace-core4-4.1.0-incubating.jarMD5: 34f428e68910ea6555c79e733d433f1aSHA1: 12b3e2adda95e8c41d9d45d33db075137871d2e2SHA256: 5d45b7904857c3e4ad36b3bcc57be2d2c5f308c69b5f6a58bd86aa7d48a25ef6Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhtrace-core4-4.1.0-incubating.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name htrace-core4 High Vendor jar package name apache Highest Vendor jar package name htrace Highest Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.htrace Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid htrace-core4 Highest Vendor pom artifactid htrace-core4 Low Vendor pom groupid org.apache.htrace Highest Vendor pom name htrace-core4 High Vendor pom parent-artifactid htrace Low Vendor pom url http://incubator.apache.org/projects/htrace.html Highest Product file name htrace-core4 High Product jar package name apache Highest Product jar package name htrace Highest Product Manifest Implementation-Title htrace-core4 High Product Manifest specification-title htrace-core4 Medium Product pom artifactid htrace-core4 Highest Product pom groupid org.apache.htrace Highest Product pom name htrace-core4 High Product pom parent-artifactid htrace Medium Product pom url http://incubator.apache.org/projects/htrace.html Medium Version Manifest Implementation-Version 4.1.0-incubating High Version pom version 4.1.0-incubating Highest
Description:
Apache HttpComponents Client
File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpclient/4.5.14/httpclient-4.5.14.jarMD5: 2cb357c4b763f47e58af6cad47df6ba3SHA1: 1194890e6f56ec29177673f2f12d0b8e627dec98SHA256: c8bc7e1c51a6d4ce72f40d2ebbabf1c4b68bfe76e732104b04381b493478e9d6Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhttpclient-4.5.14.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name httpclient High Vendor jar package name apache Highest Vendor jar package name client Highest Vendor jar package name httpclient Highest Vendor Manifest automatic-module-name org.apache.httpcomponents.httpclient Medium Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-client-ga Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.httpcomponents Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid httpclient Highest Vendor pom artifactid httpclient Low Vendor pom groupid org.apache.httpcomponents Highest Vendor pom name Apache HttpClient High Vendor pom parent-artifactid httpcomponents-client Low Vendor pom url http://hc.apache.org/httpcomponents-client-ga Highest Product file name httpclient High Product jar package name apache Highest Product jar package name client Highest Product jar package name http Highest Product jar package name httpclient Highest Product Manifest automatic-module-name org.apache.httpcomponents.httpclient Medium Product Manifest Implementation-Title Apache HttpClient High Product Manifest implementation-url http://hc.apache.org/httpcomponents-client-ga Low Product Manifest specification-title Apache HttpClient Medium Product pom artifactid httpclient Highest Product pom groupid org.apache.httpcomponents Highest Product pom name Apache HttpClient High Product pom parent-artifactid httpcomponents-client Medium Product pom url http://hc.apache.org/httpcomponents-client-ga Medium Version file version 4.5.14 High Version Manifest Implementation-Version 4.5.14 High Version pom version 4.5.14 Highest
Description:
Apache HttpComponents Core (blocking I/O)
File Path: /home/runner/.m2/repository/org/apache/httpcomponents/httpcore/4.4.15/httpcore-4.4.15.jarMD5: be7c67929df007fcac6c8eff5322d3a0SHA1: 7f2e0c573eaa7a74bac2e89b359e1f73d92a0a1dSHA256: 3cbaed088c499a10f96dde58f39dc0e7985171abd88138ca1655a872011bb142Referenced In Project/Scope: shardingsphere-infra-database-hive:providedhttpcore-4.4.15.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name httpcore High Vendor jar package name apache Highest Vendor Manifest automatic-module-name org.apache.httpcomponents.httpcore Medium Vendor Manifest implementation-build ${scmBranch}@r${buildNumber}; 2021-12-03 08:31:58+0000 Low Vendor Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor Manifest url http://hc.apache.org/httpcomponents-core-ga Low Vendor pom artifactid httpcore Highest Vendor pom artifactid httpcore Low Vendor pom groupid org.apache.httpcomponents Highest Vendor pom name Apache HttpCore High Vendor pom parent-artifactid httpcomponents-core Low Vendor pom url http://hc.apache.org/httpcomponents-core-ga Highest Product file name httpcore High Product jar package name apache Highest Product jar package name http Highest Product Manifest automatic-module-name org.apache.httpcomponents.httpcore Medium Product Manifest implementation-build ${scmBranch}@r${buildNumber}; 2021-12-03 08:31:58+0000 Low Product Manifest Implementation-Title HttpComponents Apache HttpCore High Product Manifest implementation-url http://hc.apache.org/httpcomponents-core-ga Low Product Manifest specification-title HttpComponents Apache HttpCore Medium Product Manifest url http://hc.apache.org/httpcomponents-core-ga Low Product pom artifactid httpcore Highest Product pom groupid org.apache.httpcomponents Highest Product pom name Apache HttpCore High Product pom parent-artifactid httpcomponents-core Medium Product pom url http://hc.apache.org/httpcomponents-core-ga Medium Version file version 4.4.15 High Version Manifest Implementation-Version 4.4.15 High Version pom version 4.4.15 Highest
Description:
International Component for Unicode for Java (ICU4J) is a mature, widely used Java library
providing Unicode and Globalization support
License:
Unicode/ICU License: http://source.icu-project.org/repos/icu/trunk/icu4j/main/shared/licenses/LICENSE File Path: /home/runner/.m2/repository/com/ibm/icu/icu4j/61.1/icu4j-61.1.jar
MD5: 07e6b698917de94886bf0dfb4d042fc0
SHA1: 28d33b5e44e72edcc66a5da7a34a42147f38d987
SHA256: 55c98eb1838b2a4bb9a07dc36bd378532d64d0cdcb7ceee914236866a7de4464
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
icu4j-61.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name icu4j High Vendor file (hint) name icu-project High Vendor file (hint) name unicode High Vendor jar package name ibm Highest Vendor jar package name icu Highest Vendor Manifest bundle-copyright © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html#License Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname com.ibm.icu Medium Vendor Manifest Implementation-Vendor Unicode, Inc. High Vendor Manifest Implementation-Vendor-Id org.unicode Medium Vendor pom artifactid icu4j Highest Vendor pom artifactid icu4j Low Vendor pom developer id deborah Medium Vendor pom developer id doug Medium Vendor pom developer id emmons Medium Vendor pom developer id mark Medium Vendor pom developer id markus Medium Vendor pom developer id pedberg Medium Vendor pom developer id srl Medium Vendor pom developer id yoshito Medium Vendor pom developer name Deborah Goldsmith Medium Vendor pom developer name Doug Felt Medium Vendor pom developer name John Emmons Medium Vendor pom developer name Mark Davis Medium Vendor pom developer name Markus Scherer Medium Vendor pom developer name Peter Edberg Medium Vendor pom developer name Steven Loomis Medium Vendor pom developer name Yoshito Umaoka Medium Vendor pom developer org Apple Medium Vendor pom developer org Google Medium Vendor pom developer org IBM Corporation Medium Vendor pom groupid com.ibm.icu Highest Vendor pom name ICU4J High Vendor pom url http://icu-project.org/ Highest Vendor pom (hint) artifactid icu-project Highest Vendor pom (hint) artifactid icu-project Low Vendor pom (hint) artifactid unicode Highest Vendor pom (hint) artifactid unicode Low Vendor pom (hint) name icu-project High Vendor pom (hint) name unicode High Product file name icu4j High Product hint analyzer product international_components_for_unicode Highest Product jar package name ibm Highest Product jar package name icu Highest Product Manifest bundle-copyright © 2016 and later: Unicode, Inc. and others. License & terms of use: http://www.unicode.org/copyright.html#License Low Product Manifest Bundle-Name ICU4J Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname com.ibm.icu Medium Product Manifest Implementation-Title International Components for Unicode for Java High Product Manifest specification-title International Components for Unicode for Java Medium Product pom artifactid icu4j Highest Product pom developer id deborah Low Product pom developer id doug Low Product pom developer id emmons Low Product pom developer id mark Low Product pom developer id markus Low Product pom developer id pedberg Low Product pom developer id srl Low Product pom developer id yoshito Low Product pom developer name Deborah Goldsmith Low Product pom developer name Doug Felt Low Product pom developer name John Emmons Low Product pom developer name Mark Davis Low Product pom developer name Markus Scherer Low Product pom developer name Peter Edberg Low Product pom developer name Steven Loomis Low Product pom developer name Yoshito Umaoka Low Product pom developer org Apple Low Product pom developer org Google Low Product pom developer org IBM Corporation Low Product pom groupid com.ibm.icu Highest Product pom name ICU4J High Product pom url http://icu-project.org/ Medium Version file version 61.1 High Version Manifest Bundle-Version 61.1 High Version Manifest Implementation-Version 61.1 High Version pom version 61.1 Highest
pkg:maven/com.ibm.icu/icu4j@61.1 (Confidence :High)cpe:2.3:a:icu-project:international_components_for_unicode:61.1:*:*:*:*:*:*:* (Confidence :Low) suppress cpe:2.3:a:unicode:international_components_for_unicode:61.1:*:*:*:*:*:*:* (Confidence :Low) suppress CVE-2018-18928 (OSSINDEX)suppress
International Components for Unicode (ICU) for C/C++ 63.1 has an integer overflow in number::impl::DecimalQuantity::toScientificString() in i18n/number_decimalquantity.cpp.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2018-18928 for details CWE-190 Integer Overflow or Wraparound
CVSSv3:
Base Score: CRITICAL (9.800000190734863) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:com.ibm.icu:icu4j:61.1:*:*:*:*:*:*:* Description:
istack common utility code License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/com/sun/istack/istack-commons-runtime/3.0.12/istack-commons-runtime-3.0.12.jar
MD5: 1952bd76321f8580cfaa57e332a68287
SHA1: cbbe1a62b0cc6c85972e99d52aaee350153dc530
SHA256: 27d85fc134c9271d5c79d3300fc4669668f017e72409727c428f54f2417f04cd
Referenced In Projects/Scopes: shardingsphere-test-fixture-database:compile shardingsphere-test-it-parser:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-it:compile shardingsphere-test-util:compile shardingsphere-test-e2e-agent-plugins-logging:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-plugins:compile shardingsphere-test-e2e-operation:compile shardingsphere-test-it-yaml:compile shardingsphere-test-fixture:compile shardingsphere-test-e2e-agent-plugins-tracing:compile shardingsphere-test-it-spi:compile shardingsphere-test-fixture-infra:compile shardingsphere-test-e2e-env:compile shardingsphere-test:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-it-optimizer:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-test-e2e-agent-fixture:compile shardingsphere-test-native:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-agent:compile shardingsphere-test-it-rewriter:compile shardingsphere-test-e2e-agent-plugins-metrics:compile shardingsphere-test-e2e-pipeline:compile istack-commons-runtime-3.0.12.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 Evidence Type Source Name Value Confidence Vendor file name istack-commons-runtime High Vendor jar package name com Highest Vendor jar package name istack Highest Vendor jar package name sun Highest Vendor jar (hint) package name oracle Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname com.sun.istack.commons-runtime Medium Vendor Manifest implementation-build-id 3.0.12 - 7ed1368 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id com.sun.istack Medium Vendor Manifest multi-release true Low Vendor pom artifactid istack-commons-runtime Highest Vendor pom artifactid istack-commons-runtime Low Vendor pom groupid com.sun.istack Highest Vendor pom name istack common utility code runtime High Vendor pom parent-artifactid istack-commons Low Product file name istack-commons-runtime High Product jar package name com Highest Product jar package name istack Highest Product jar package name sun Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name istack common utility code runtime Medium Product Manifest bundle-symbolicname com.sun.istack.commons-runtime Medium Product Manifest implementation-build-id 3.0.12 - 7ed1368 Low Product Manifest multi-release true Low Product pom artifactid istack-commons-runtime Highest Product pom groupid com.sun.istack Highest Product pom name istack common utility code runtime High Product pom parent-artifactid istack-commons Medium Version file version 3.0.12 High Version Manifest Bundle-Version 3.0.12 High Version Manifest implementation-build-id 3.0.12 Low Version pom version 3.0.12 Highest
Description:
Jackson is a high-performance JSON processor (parser, generator)
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/codehaus/jackson/jackson-core-asl/1.9.13/jackson-core-asl-1.9.13.jar
MD5: 319c49a4304e3fa9fe3cd8dcfc009d37
SHA1: 3c304d70f42f832e0a86d45bd437f692129299a4
SHA256: 440a9cb5ca95b215f953d3a20a6b1a10da1f09b529a9ddea5f8a4905ddab4f5a
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jackson-core-asl-1.9.13.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jackson-core-asl High Vendor jar package name codehaus Highest Vendor jar package name jackson Highest Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6 Low Vendor Manifest bundle-symbolicname jackson-core-asl Medium Vendor Manifest Implementation-Vendor http://fasterxml.com High Vendor Manifest specification-vendor http://www.ietf.org/rfc/rfc4627.txt Low Vendor pom artifactid jackson-core-asl Highest Vendor pom artifactid jackson-core-asl Low Vendor pom developer email tatu@fasterxml.com Low Vendor pom developer id cowtowncoder Medium Vendor pom developer name Tatu Saloranta Medium Vendor pom groupid org.codehaus.jackson Highest Vendor pom name Jackson High Vendor pom organization name FasterXML High Vendor pom organization url http://fasterxml.com Medium Vendor pom url http://jackson.codehaus.org Highest Product file name jackson-core-asl High Product jar package name codehaus Highest Product jar package name jackson Highest Product Manifest Bundle-Name Jackson JSON processor Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6 Low Product Manifest bundle-symbolicname jackson-core-asl Medium Product Manifest Implementation-Title Jackson JSON processor High Product Manifest specification-title JSON - JavaScript Object Notation Medium Product pom artifactid jackson-core-asl Highest Product pom developer email tatu@fasterxml.com Low Product pom developer id cowtowncoder Low Product pom developer name Tatu Saloranta Low Product pom groupid org.codehaus.jackson Highest Product pom name Jackson High Product pom organization name FasterXML Low Product pom organization url http://fasterxml.com Low Product pom url http://jackson.codehaus.org Medium Version file version 1.9.13 High Version Manifest Bundle-Version 1.9.13 High Version Manifest Implementation-Version 1.9.13 High Version pom version 1.9.13 Highest
Description:
Data format extension for Jackson to offer
alternative support for serializing POJOs as XML and deserializing XML as pojos.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/2.16.1/jackson-dataformat-xml-2.16.1.jar
MD5: ab3c4a4dcd1928d05f206c5d0e9fe36f
SHA1: d952ad30d3f2d1220f39db175618414b56d14638
SHA256: b8e73fa171d1276832abbf20ebb4df597e377405f875ed39808cee9acca3d3ac
Referenced In Projects/Scopes: shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-jdbc-distribution:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-jdbc:compile shardingsphere-standalone-mode-repository-jdbc:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile jackson-dataformat-xml-2.16.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jackson-dataformat-xml High Vendor jar package name dataformat Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name xml Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-dataformat-xml Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.dataformat.jackson-dataformat-xml Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.dataformat Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-dataformat-xml Highest Vendor pom artifactid jackson-dataformat-xml Low Vendor pom groupid com.fasterxml.jackson.dataformat Highest Vendor pom name Jackson-dataformat-XML High Vendor pom parent-artifactid jackson-base Low Vendor pom parent-groupid com.fasterxml.jackson Medium Vendor pom url FasterXML/jackson-dataformat-xml Highest Product file name jackson-dataformat-xml High Product jar package name dataformat Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name xml Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-dataformat-xml Low Product Manifest Bundle-Name Jackson-dataformat-XML Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.dataformat.jackson-dataformat-xml Medium Product Manifest Implementation-Title Jackson-dataformat-XML High Product Manifest multi-release true Low Product Manifest specification-title Jackson-dataformat-XML Medium Product pom artifactid jackson-dataformat-xml Highest Product pom groupid com.fasterxml.jackson.dataformat Highest Product pom name Jackson-dataformat-XML High Product pom parent-artifactid jackson-base Medium Product pom parent-groupid com.fasterxml.jackson Medium Product pom url FasterXML/jackson-dataformat-xml High Version file version 2.16.1 High Version Manifest Bundle-Version 2.16.1 High Version Manifest Implementation-Version 2.16.1 High Version pom version 2.16.1 Highest
Related Dependencies jackson-dataformat-yaml-2.16.1.jarFile Path: /home/runner/.m2/repository/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/2.16.1/jackson-dataformat-yaml-2.16.1.jar MD5: f08a64b0e8a224690e774ea3d5dcd00f SHA1: 8e4f1923d73cd55f2b4c0d56ee4ed80419297354 SHA256: fd67e0fafe368ad3dfc1b545eb8fe084a5c64628fb71ef70bd94a4dab27aefff pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml@2.16.1 Description:
Pile of code that is shared by all Jackson-based JAX-RS
providers.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/fasterxml/jackson/jaxrs/jackson-jaxrs-base/2.16.1/jackson-jaxrs-base-2.16.1.jar
MD5: 5969d6d1b45a6b0e9572e3057c646ab3
SHA1: ea221d425ca8b3795d6d3ada5fb3881e058bd6bf
SHA256: 7a2f636f64953910ff2b7331b4d5a46596fdc968d23893136f03c94a877fc390
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jackson-jaxrs-base-2.16.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jackson-jaxrs-base High Vendor jar package name base Highest Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name jaxrs Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.jaxrs.jackson-jaxrs-base Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.jaxrs Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-jaxrs-base Highest Vendor pom artifactid jackson-jaxrs-base Low Vendor pom groupid com.fasterxml.jackson.jaxrs Highest Vendor pom name Jackson-JAXRS: base High Vendor pom parent-artifactid jackson-jaxrs-providers Low Product file name jackson-jaxrs-base High Product jar package name base Highest Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name jaxrs Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base Low Product Manifest Bundle-Name Jackson-JAXRS: base Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.jaxrs.jackson-jaxrs-base Medium Product Manifest Implementation-Title Jackson-JAXRS: base High Product Manifest multi-release true Low Product Manifest specification-title Jackson-JAXRS: base Medium Product pom artifactid jackson-jaxrs-base Highest Product pom groupid com.fasterxml.jackson.jaxrs Highest Product pom name Jackson-JAXRS: base High Product pom parent-artifactid jackson-jaxrs-providers Medium Version file version 2.16.1 High Version Manifest Bundle-Version 2.16.1 High Version Manifest Implementation-Version 2.16.1 High Version pom version 2.16.1 Highest
Description:
Functionality to handle JSON input/output for JAX-RS implementations (like Jersey and RESTeasy) using standard Jackson data binding.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/2.16.1/jackson-jaxrs-json-provider-2.16.1.jar
MD5: e0132f936161a90c8a856047233713aa
SHA1: 7dc41fb371b6a1e4f0406628ecb8ca98cdb3e56e
SHA256: d61a97ff0d527290e495f6565e1b8bce21e4359bfb475b4f1908c2e4f8701c31
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jackson-jaxrs-json-provider-2.16.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jackson-jaxrs-json-provider High Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name jaxrs Highest Vendor jar package name json Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.jaxrs.jackson-jaxrs-json-provider Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.jaxrs Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-jaxrs-json-provider Highest Vendor pom artifactid jackson-jaxrs-json-provider Low Vendor pom groupid com.fasterxml.jackson.jaxrs Highest Vendor pom name Jackson-JAXRS: JSON High Vendor pom parent-artifactid jackson-jaxrs-providers Low Product file name jackson-jaxrs-json-provider High Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name jaxrs Highest Product jar package name json Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider Low Product Manifest Bundle-Name Jackson-JAXRS: JSON Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.jaxrs.jackson-jaxrs-json-provider Medium Product Manifest Implementation-Title Jackson-JAXRS: JSON High Product Manifest multi-release true Low Product Manifest specification-title Jackson-JAXRS: JSON Medium Product pom artifactid jackson-jaxrs-json-provider Highest Product pom groupid com.fasterxml.jackson.jaxrs Highest Product pom name Jackson-JAXRS: JSON High Product pom parent-artifactid jackson-jaxrs-providers Medium Version file version 2.16.1 High Version Manifest Bundle-Version 2.16.1 High Version Manifest Implementation-Version 2.16.1 High Version pom version 2.16.1 Highest
Description:
Simple data-binding that builds directly on jackson-core (streaming),
has no other dependencies, and provides additional builder-style content generator
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/fasterxml/jackson/jr/jackson-jr-objects/2.16.1/jackson-jr-objects-2.16.1.jar
MD5: c37f58a1eba753680ecf8338a0a08319
SHA1: 3dbc347cab5f6d52ece1584524dcf1da59197cd2
SHA256: 2807c26f9e7e7848dad4376b38f272f39af044f930a03f27e9aa7bbde87500c8
Referenced In Projects/Scopes: shardingsphere-agent-distribution:runtime shardingsphere-agent-tracing-opentelemetry:runtime jackson-jr-objects-2.16.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/io.opentelemetry/opentelemetry-exporter-jaeger@1.31.0 Evidence Type Source Name Value Confidence Vendor file name jackson-jr-objects High Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name jr Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-jr Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.jr.jackson-jr-objects Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.jr Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-jr-objects Highest Vendor pom artifactid jackson-jr-objects Low Vendor pom groupid com.fasterxml.jackson.jr Highest Vendor pom parent-artifactid jackson-jr-parent Low Vendor pom url FasterXML/jackson-jr Highest Product file name jackson-jr-objects High Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name jr Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-jr Low Product Manifest Bundle-Name jackson-jr-objects Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.jr.jackson-jr-objects Medium Product Manifest Implementation-Title jackson-jr-objects High Product Manifest multi-release true Low Product Manifest specification-title jackson-jr-objects Medium Product pom artifactid jackson-jr-objects Highest Product pom groupid com.fasterxml.jackson.jr Highest Product pom parent-artifactid jackson-jr-parent Medium Product pom url FasterXML/jackson-jr High Version file version 2.16.1 High Version Manifest Bundle-Version 2.16.1 High Version Manifest Implementation-Version 2.16.1 High Version pom version 2.16.1 Highest
Description:
Data Mapper package is a high-performance data binding package
built on Jackson JSON processor
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/codehaus/jackson/jackson-mapper-asl/1.9.13/jackson-mapper-asl-1.9.13.jar
MD5: 1750f9c339352fc4b728d61b57171613
SHA1: 1ee2f2bed0e5dd29d1cb155a166e6f8d50bbddb7
SHA256: 74e7a07a76f2edbade29312a5a2ebccfa019128bc021ece3856d76197e9be0c2
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jackson-mapper-asl-1.9.13.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jackson-mapper-asl High Vendor jar package name codehaus Highest Vendor jar package name jackson Highest Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6 Low Vendor Manifest bundle-symbolicname jackson-mapper-asl Medium Vendor Manifest Implementation-Vendor http://fasterxml.com High Vendor pom artifactid jackson-mapper-asl Highest Vendor pom artifactid jackson-mapper-asl Low Vendor pom developer email tatu@fasterxml.com Low Vendor pom developer id cowtowncoder Medium Vendor pom developer name Tatu Saloranta Medium Vendor pom groupid org.codehaus.jackson Highest Vendor pom name Data Mapper for Jackson High Vendor pom organization name FasterXML High Vendor pom organization url http://fasterxml.com Medium Vendor pom url http://jackson.codehaus.org Highest Product file name jackson-mapper-asl High Product jar package name codehaus Highest Product jar package name jackson Highest Product Manifest Bundle-Name Data mapper for Jackson JSON processor Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5, JavaSE-1.6 Low Product Manifest bundle-symbolicname jackson-mapper-asl Medium Product Manifest Implementation-Title Data mapper for Jackson JSON processor High Product pom artifactid jackson-mapper-asl Highest Product pom developer email tatu@fasterxml.com Low Product pom developer id cowtowncoder Low Product pom developer name Tatu Saloranta Low Product pom groupid org.codehaus.jackson Highest Product pom name Data Mapper for Jackson High Product pom organization name FasterXML Low Product pom organization url http://fasterxml.com Low Product pom url http://jackson.codehaus.org Medium Version file version 1.9.13 High Version Manifest Bundle-Version 1.9.13 High Version Manifest Implementation-Version 1.9.13 High Version pom version 1.9.13 Highest
CVE-2017-7525 (OSSINDEX)suppress
A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2017-7525 for details CWE-184 Incomplete List of Disallowed Inputs
CVSSv3:
Base Score: CRITICAL (9.800000190734863) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.codehaus.jackson:jackson-mapper-asl:1.9.13:*:*:*:*:*:*:* CVE-2019-10172 suppress
A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes. CWE-611 Improper Restriction of XML External Entity Reference
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Support for using JAXB annotations as an alternative to "native" Jackson annotations,
for configuring data-binding.
License:
The Apache Software License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.16.1/jackson-module-jaxb-annotations-2.16.1.jar
MD5: 722b98d73d67cc1d7ae10cc92b73d9a4
SHA1: e9df364a2695e66eb8d2803d6725424842760125
SHA256: 60961249896b5e49bea4565ec7b860100ff3872aee1d8e416ade2f812f3fca36
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jackson-module-jaxb-annotations-2.16.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jackson-module-jaxb-annotations High Vendor jar package name fasterxml Highest Vendor jar package name jackson Highest Vendor jar package name jaxb Highest Vendor jar package name module Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/jackson-modules-base Low Vendor Manifest bundle-symbolicname com.fasterxml.jackson.module.jackson-module-jaxb-annotations Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.jackson.module Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid jackson-module-jaxb-annotations Highest Vendor pom artifactid jackson-module-jaxb-annotations Low Vendor pom groupid com.fasterxml.jackson.module Highest Vendor pom name Jackson module: Old JAXB Annotations (javax.xml.bind) High Vendor pom parent-artifactid jackson-modules-base Low Vendor pom url FasterXML/jackson-modules-base Highest Product file name jackson-module-jaxb-annotations High Product jar package name fasterxml Highest Product jar package name jackson Highest Product jar package name jaxb Highest Product jar package name module Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/jackson-modules-base Low Product Manifest Bundle-Name Jackson module: Old JAXB Annotations (javax.xml.bind) Medium Product Manifest bundle-symbolicname com.fasterxml.jackson.module.jackson-module-jaxb-annotations Medium Product Manifest Implementation-Title Jackson module: Old JAXB Annotations (javax.xml.bind) High Product Manifest multi-release true Low Product Manifest specification-title Jackson module: Old JAXB Annotations (javax.xml.bind) Medium Product pom artifactid jackson-module-jaxb-annotations Highest Product pom groupid com.fasterxml.jackson.module Highest Product pom name Jackson module: Old JAXB Annotations (javax.xml.bind) High Product pom parent-artifactid jackson-modules-base Medium Product pom url FasterXML/jackson-modules-base High Version file version 2.16.1 High Version Manifest Bundle-Version 2.16.1 High Version Manifest Implementation-Version 2.16.1 High Version pom version 2.16.1 Highest
Description:
Jakarta Activation License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/com/sun/activation/jakarta.activation/1.2.2/jakarta.activation-1.2.2.jar
MD5: 0b8bee3bf29b9a015f8b992035581a7c
SHA1: 74548703f9851017ce2f556066659438019e7eb5
SHA256: 02156773e4ae9d048d14a56ad35d644bee9f1052a791d072df3ded3c656e6e1a
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics:runtime shardingsphere-test-it-spi:runtime shardingsphere-test-e2e-agent-jdbc-fixture:runtime shardingsphere-test-e2e-pipeline:runtime shardingsphere-test-e2e:runtime shardingsphere-test-it-pipeline:runtime shardingsphere-test-native:runtime shardingsphere-test-e2e-agent-fixture:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-test-it-optimizer:runtime shardingsphere-test-e2e-transaction:runtime shardingsphere-test-e2e-agent-proxy-fixture:runtime shardingsphere-test-e2e-sql:runtime shardingsphere-test-it-rewriter:runtime shardingsphere-test-fixture-database:runtime shardingsphere-test-e2e-agent-plugins-logging-file:runtime shardingsphere-test-e2e-agent:runtime shardingsphere-test-e2e-agent-plugins-zipkin:runtime shardingsphere-test-e2e-agent-plugins:runtime shardingsphere-test-util:runtime shardingsphere-test-it-parser:runtime shardingsphere-test-e2e-agent-plugins-metrics-prometheus:runtime shardingsphere-test-e2e-env:runtime shardingsphere-test-it:runtime shardingsphere-test-e2e-driver:runtime shardingsphere-test-e2e-showprocesslist:runtime shardingsphere-test:runtime shardingsphere-test-it-yaml:runtime shardingsphere-test-e2e-agent-engine:runtime shardingsphere-test-e2e-agent-plugins-jaeger:runtime shardingsphere-test-fixture-infra:runtime shardingsphere-test-e2e-agent-plugins-logging:runtime shardingsphere-test-e2e-operation:runtime shardingsphere-test-e2e-agent-plugins-tracing:runtime shardingsphere-test-fixture:runtime jakarta.activation-1.2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 Evidence Type Source Name Value Confidence Vendor file name jakarta.activation High Vendor jar package name activation Highest Vendor jar package name sun Highest Vendor jar (hint) package name oracle Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname com.sun.activation.jakarta.activation Medium Vendor Manifest extension-name jakarta.activation Medium Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id com.sun Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.activation Highest Vendor pom artifactid jakarta.activation Low Vendor pom groupid com.sun.activation Highest Vendor pom name Jakarta Activation High Vendor pom parent-artifactid all Low Product file name jakarta.activation High Product jar package name activation Highest Product jar package name javax Highest Product jar package name sun Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Activation Medium Product Manifest bundle-symbolicname com.sun.activation.jakarta.activation Medium Product Manifest extension-name jakarta.activation Medium Product Manifest Implementation-Title javax.activation High Product Manifest specification-title Jakarta Activation Specification Medium Product pom artifactid jakarta.activation Highest Product pom groupid com.sun.activation Highest Product pom name Jakarta Activation High Product pom parent-artifactid all Medium Version file version 1.2.2 High Version Manifest Bundle-Version 1.2.2 High Version Manifest Implementation-Version 1.2.2 High Version pom version 1.2.2 Highest
Description:
Jakarta Activation API jar License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/jakarta/activation/jakarta.activation-api/1.2.2/jakarta.activation-api-1.2.2.jar
MD5: 1cbb480310fa1987f9db7a3ed7118af7
SHA1: 99f53adba383cb1bf7c3862844488574b559621f
SHA256: a187a939103aef5849a7af84bd7e27be2d120c410af291437375ffe061f4f09d
Referenced In Projects/Scopes: shardingsphere-test-fixture-database:compile shardingsphere-test-it-parser:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-it:compile shardingsphere-test-util:compile shardingsphere-test-e2e-agent-plugins-logging:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-plugins:compile shardingsphere-test-e2e-operation:compile shardingsphere-test-it-yaml:compile shardingsphere-test-fixture:compile shardingsphere-test-e2e-agent-plugins-tracing:compile shardingsphere-test-it-spi:compile shardingsphere-test-fixture-infra:compile shardingsphere-test-e2e-env:compile shardingsphere-test:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-it-optimizer:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-test-e2e-agent-fixture:compile shardingsphere-test-native:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-agent:compile shardingsphere-test-it-rewriter:compile shardingsphere-test-e2e-agent-plugins-metrics:compile shardingsphere-test-e2e-pipeline:compile jakarta.activation-api-1.2.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-yaml@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture-database@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-native@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture-infra@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-rewriter@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-operation@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jakarta.activation-api High Vendor jar package name activation Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.activation-api Medium Vendor Manifest extension-name jakarta.activation Medium Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id com.sun Medium Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.activation-api Highest Vendor pom artifactid jakarta.activation-api Low Vendor pom groupid jakarta.activation Highest Vendor pom name Jakarta Activation API jar High Vendor pom parent-artifactid all Low Vendor pom parent-groupid com.sun.activation Medium Product file name jakarta.activation-api High Product jar package name activation Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta Activation API jar Medium Product Manifest bundle-symbolicname jakarta.activation-api Medium Product Manifest extension-name jakarta.activation Medium Product Manifest Implementation-Title jakarta.activation.jakarta.activation-api High Product Manifest specification-title jakarta.activation.jakarta.activation-api Medium Product pom artifactid jakarta.activation-api Highest Product pom groupid jakarta.activation Highest Product pom name Jakarta Activation API jar High Product pom parent-artifactid all Medium Product pom parent-groupid com.sun.activation Medium Version file version 1.2.2 High Version Manifest Bundle-Version 1.2.2 High Version Manifest Implementation-Version 1.2.2 High Version pom version 1.2.2 Highest
Description:
Jakarta Transactions License:
EPL 2.0: http://www.eclipse.org/legal/epl-2.0
GPL2 w/ CPE: https://www.gnu.org/software/classpath/license.html File Path: /home/runner/.m2/repository/jakarta/transaction/jakarta.transaction-api/1.3.3/jakarta.transaction-api-1.3.3.jar
MD5: cc45726045cc9a0728f803f9db4c90c4
SHA1: c4179d48720a1e87202115fbed6089bdc4195405
SHA256: 0b02a194dd04ee2e192dc9da9579e10955dd6e8ac707adfc91d92f119b0e67ab
Referenced In Projects/Scopes: shardingsphere-proxy-backend-opengauss:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-transaction-xa-spi:compile shardingsphere-transaction-xa-narayana:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-transaction-xa-atomikos:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-transaction-xa-core:compile shardingsphere-jdbc-distribution:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile jakarta.transaction-api-1.3.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-narayana@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jakarta.transaction-api High Vendor jar package name javax Highest Vendor jar package name transaction Highest Vendor Manifest automatic-module-name java.transaction Medium Vendor Manifest bundle-docurl https://github.com/eclipse-ee4j Low Vendor Manifest bundle-symbolicname jakarta.transaction-api Medium Vendor Manifest extension-name javax.transaction Medium Vendor Manifest Implementation-Vendor EE4J Community High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid jakarta.transaction-api Highest Vendor pom artifactid jakarta.transaction-api Low Vendor pom developer id stephen_felts Medium Vendor pom developer name Stephen Felts Medium Vendor pom developer org Oracle, Inc. Medium Vendor pom groupid jakarta.transaction Highest Vendor pom name API High Vendor pom name ${extension.name} API High Vendor pom organization name EE4J Community High Vendor pom organization url eclipse-ee4j Medium Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.eclipse.ee4j Medium Vendor pom url https://projects.eclipse.org/projects/ee4j.jta Highest Product file name jakarta.transaction-api High Product jar package name javax Highest Product jar package name transaction Highest Product Manifest automatic-module-name java.transaction Medium Product Manifest bundle-docurl https://github.com/eclipse-ee4j Low Product Manifest Bundle-Name javax.transaction API Medium Product Manifest bundle-symbolicname jakarta.transaction-api Medium Product Manifest extension-name javax.transaction Medium Product pom artifactid jakarta.transaction-api Highest Product pom developer id stephen_felts Low Product pom developer name Stephen Felts Low Product pom developer org Oracle, Inc. Low Product pom groupid jakarta.transaction Highest Product pom name API High Product pom name ${extension.name} API High Product pom organization name EE4J Community Low Product pom parent-artifactid project Medium Product pom parent-groupid org.eclipse.ee4j Medium Product pom url eclipse-ee4j High Product pom url https://projects.eclipse.org/projects/ee4j.jta Medium Version file version 1.3.3 High Version Manifest Bundle-Version 1.3.3 High Version Manifest Implementation-Version 1.3.3 High Version pom parent-version 1.3.3 Low Version pom version 1.3.3 Highest
Description:
Jakarta XML Binding API 2.3 Design Specification License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/jakarta/xml/bind/jakarta.xml.bind-api/2.3.3/jakarta.xml.bind-api-2.3.3.jar
MD5: 61286918ca0192e9f87d1358aef718dd
SHA1: 48e3b9cfc10752fba3521d6511f4165bea951801
SHA256: c04539f472e9a6dd0c7685ea82d677282269ab8e7baca2e14500e381e0c6cec5
Referenced In Projects/Scopes: shardingsphere-test-fixture-database:compile shardingsphere-test-it-parser:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-it:compile shardingsphere-test-util:compile shardingsphere-test-e2e-agent-plugins-logging:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-plugins:compile shardingsphere-test-e2e-operation:compile shardingsphere-test-it-yaml:compile shardingsphere-test-fixture:compile shardingsphere-test-e2e-agent-plugins-tracing:compile shardingsphere-test-it-spi:compile shardingsphere-test-fixture-infra:compile shardingsphere-test-e2e-env:compile shardingsphere-test:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-it-optimizer:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-test-e2e-agent-fixture:compile shardingsphere-test-native:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-agent:compile shardingsphere-test-it-rewriter:compile shardingsphere-test-e2e-agent-plugins-metrics:compile shardingsphere-test-e2e-pipeline:compile jakarta.xml.bind-api-2.3.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-native@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture-database@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-rewriter@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-yaml@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture-infra@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-operation@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jakarta.xml.bind-api High Vendor jar package name bind Highest Vendor jar package name xml Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname jakarta.xml.bind-api Medium Vendor Manifest extension-name jakarta.xml.bind Medium Vendor Manifest implementation-build-id 2.3.3-RELEASE-fd06b2b Low Vendor Manifest multi-release true Low Vendor Manifest specification-vendor Eclipse Foundation Low Vendor pom artifactid jakarta.xml.bind-api Highest Vendor pom artifactid jakarta.xml.bind-api Low Vendor pom groupid jakarta.xml.bind Highest Vendor pom name Jakarta XML Binding API High Vendor pom parent-artifactid jakarta.xml.bind-api-parent Low Product file name jakarta.xml.bind-api High Product jar package name bind Highest Product jar package name xml Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name Jakarta XML Binding API Medium Product Manifest bundle-symbolicname jakarta.xml.bind-api Medium Product Manifest extension-name jakarta.xml.bind Medium Product Manifest implementation-build-id 2.3.3-RELEASE-fd06b2b Low Product Manifest multi-release true Low Product pom artifactid jakarta.xml.bind-api Highest Product pom groupid jakarta.xml.bind Highest Product pom name Jakarta XML Binding API High Product pom parent-artifactid jakarta.xml.bind-api-parent Medium Version file version 2.3.3 High Version Manifest Bundle-Version 2.3.3 High Version Manifest Implementation-Version 2.3.3 High Version pom version 2.3.3 Highest
Description:
Jamon runtime support classes File Path: /home/runner/.m2/repository/org/jamon/jamon-runtime/2.4.1/jamon-runtime-2.4.1.jarMD5: 23137654945e647ab4692370749bdc82SHA1: 78feef47f07af7a5caa663ca2ba35b31853a080fSHA256: 0dc41d463124b3815d0ce2ce8064b00b2ed0237c187ab277e1052ec7c82ba28dReferenced In Project/Scope: shardingsphere-infra-database-hive:providedjamon-runtime-2.4.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name jamon-runtime High Vendor jar package name jamon Highest Vendor jar package name jamon Low Vendor pom artifactid jamon-runtime Highest Vendor pom artifactid jamon-runtime Low Vendor pom groupid org.jamon Highest Vendor pom name jamon-runtime High Vendor pom parent-artifactid jamon-java-parent Low Product file name jamon-runtime High Product jar package name jamon Highest Product pom artifactid jamon-runtime Highest Product pom groupid org.jamon Highest Product pom name jamon-runtime High Product pom parent-artifactid jamon-java-parent Medium Version file version 2.4.1 High Version pom version 2.4.1 Highest
Description:
The "JANINO" implementation of the "commons-compiler" API: Super-small, super-fast, independent from the JDK's "tools.jar". License:
https://spdx.org/licenses/BSD-3-Clause.html File Path: /home/runner/.m2/repository/org/codehaus/janino/janino/3.1.9/janino-3.1.9.jar
MD5: 597cbcd4d0b8273552758c50bf423926
SHA1: 536fb0c44627faae32ca7a8a24734f4aab38c878
SHA256: 7df88d90aa165ab48bdebea425fa009eeef04918c82e98cdbea5e747e114508d
Referenced In Projects/Scopes: shardingsphere-proxy-frontend-mysql:runtime shardingsphere-proxy-frontend-postgresql:runtime shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-agent-tracing-core:provided shardingsphere-agent-logging-file:provided shardingsphere-data-pipeline-postgresql:runtime shardingsphere-sql-federation-core:runtime shardingsphere-test-e2e-transaction:runtime shardingsphere-agent-plugin-core:provided shardingsphere-proxy-backend-opengauss:runtime shardingsphere-test-e2e-agent-plugins-logging-file:runtime shardingsphere-agent-plugin-logging:provided shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-spi:runtime shardingsphere-test-e2e-showprocesslist:runtime shardingsphere-test-e2e-agent-engine:runtime shardingsphere-agent-tracing-type:provided shardingsphere-data-pipeline-cdc-core:runtime shardingsphere-test-e2e-agent-plugins-jaeger:runtime shardingsphere-sql-federation-executor:runtime shardingsphere-agent-plugins:provided shardingsphere-data-pipeline-core:runtime shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-distribution:runtime shardingsphere-test-e2e-agent-jdbc-fixture:runtime shardingsphere-agent-logging-type:provided shardingsphere-test-e2e-pipeline:runtime shardingsphere-test-it-pipeline:runtime shardingsphere-data-pipeline-scenario-migration:runtime shardingsphere-jdbc:runtime shardingsphere-sql-federation-distsql-handler:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-data-pipeline-opengauss:runtime shardingsphere-data-pipeline-distsql-handler:runtime shardingsphere-jdbc-distribution:runtime shardingsphere-test-it-optimizer:runtime shardingsphere-test-e2e-agent-proxy-fixture:runtime shardingsphere-test-e2e-sql:runtime shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-agent-plugins-zipkin:runtime shardingsphere-test-e2e-agent-plugins-metrics-prometheus:runtime shardingsphere-test-e2e-env:runtime shardingsphere-proxy-backend-mysql:runtime shardingsphere-data-pipeline-scenario-consistencycheck:runtime shardingsphere-sql-federation-optimizer:runtime shardingsphere-proxy-backend-core:runtime shardingsphere-test-e2e-driver:runtime shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-bootstrap:runtime shardingsphere-proxy-frontend-opengauss:runtime shardingsphere-proxy-backend-postgresql:runtime shardingsphere-agent-plugin-metrics:provided janino-3.1.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.calcite/calcite-core@1.35.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-executor@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name janino High Vendor jar package name codehaus Highest Vendor jar package name compiler Highest Vendor jar package name janino Highest Vendor jar package name tools Highest Vendor Manifest bundle-symbolicname org.codehaus.janino.janino;singleton:=true Medium Vendor Manifest require-bundle org.codehaus.janino.commons-compiler Low Vendor pom artifactid janino Highest Vendor pom artifactid janino Low Vendor pom groupid org.codehaus.janino Highest Vendor pom name janino High Vendor pom parent-artifactid janino-parent Low Product file name janino High Product jar package name codehaus Highest Product jar package name compiler Highest Product jar package name janino Highest Product jar package name java Highest Product jar package name tools Highest Product Manifest Bundle-Name janino Medium Product Manifest bundle-symbolicname org.codehaus.janino.janino;singleton:=true Medium Product Manifest require-bundle org.codehaus.janino.commons-compiler Low Product pom artifactid janino Highest Product pom groupid org.codehaus.janino Highest Product pom name janino High Product pom parent-artifactid janino-parent Medium Version file version 3.1.9 High Version Manifest Bundle-Version 3.1.9 High Version pom version 3.1.9 Highest
CVE-2023-33546 suppress
Janino 3.1.9 and earlier are subject to denial of service (DOS) attacks when using the expression evaluator.guess parameter name method. If the parser runs on user-supplied input, an attacker could supply content that causes the parser to crash due to a stack overflow. NOTE: this is disputed by multiple parties because Janino is not intended for use with untrusted input. CWE-787 Out-of-bounds Write
CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation
simple. It is a class library for editing bytecodes in Java.
License:
MPL 1.1: http://www.mozilla.org/MPL/MPL-1.1.html
LGPL 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Apache License 2.0: http://www.apache.org/licenses/ File Path: /home/runner/.m2/repository/org/javassist/javassist/3.20.0-GA/javassist-3.20.0-GA.jar
MD5: a89dd7907d76e061ec2c07e762a74256
SHA1: a9cbcdfb7e9f86fbc74d3afae65f2248bfbf82a0
SHA256: d7691062fb779c2381640c8f72acba2c23873b01c243866d41c15dc4c8848ea2
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javassist-3.20.0-GA.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javassist High Vendor jar package name bytecode Highest Vendor jar package name javassist Highest Vendor Manifest bundle-symbolicname javassist Medium Vendor Manifest specification-vendor Shigeru Chiba, www.javassist.org Low Vendor pom artifactid javassist Highest Vendor pom artifactid javassist Low Vendor pom developer email adinn@redhat.com Low Vendor pom developer email chiba@javassist.org Low Vendor pom developer email kabir.khan@jboss.com Low Vendor pom developer email smarlow@redhat.com Low Vendor pom developer id adinn Medium Vendor pom developer id chiba Medium Vendor pom developer id kabir.khan@jboss.com Medium Vendor pom developer id scottmarlow Medium Vendor pom developer name Andrew Dinn Medium Vendor pom developer name Kabir Khan Medium Vendor pom developer name Scott Marlow Medium Vendor pom developer name Shigeru Chiba Medium Vendor pom developer org JBoss Medium Vendor pom developer org The Javassist Project Medium Vendor pom developer org URL http://www.javassist.org/ Medium Vendor pom developer org URL http://www.jboss.org/ Medium Vendor pom groupid org.javassist Highest Vendor pom name Javassist High Vendor pom organization name Shigeru Chiba, www.javassist.org High Vendor pom url http://www.javassist.org/ Highest Product file name javassist High Product jar package name bytecode Highest Product jar package name javassist Highest Product Manifest Bundle-Name Javassist Medium Product Manifest bundle-symbolicname javassist Medium Product Manifest specification-title Javassist Medium Product pom artifactid javassist Highest Product pom developer email adinn@redhat.com Low Product pom developer email chiba@javassist.org Low Product pom developer email kabir.khan@jboss.com Low Product pom developer email smarlow@redhat.com Low Product pom developer id adinn Low Product pom developer id chiba Low Product pom developer id kabir.khan@jboss.com Low Product pom developer id scottmarlow Low Product pom developer name Andrew Dinn Low Product pom developer name Kabir Khan Low Product pom developer name Scott Marlow Low Product pom developer name Shigeru Chiba Low Product pom developer org JBoss Low Product pom developer org The Javassist Project Low Product pom developer org URL http://www.javassist.org/ Low Product pom developer org URL http://www.jboss.org/ Low Product pom groupid org.javassist Highest Product pom name Javassist High Product pom organization name Shigeru Chiba, www.javassist.org Low Product pom url http://www.javassist.org/ Medium Version Manifest specification-version 3.20.0-GA High Version pom version 3.20.0-GA Highest
Description:
Common Annotations for the JavaTM Platform API License:
CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /home/runner/.m2/repository/javax/annotation/javax.annotation-api/1.2/javax.annotation-api-1.2.jar
MD5: 75fe320d2b3763bd6883ae1ede35e987
SHA1: 479c1e06db31c432330183f5cae684163f186146
SHA256: 5909b396ca3a2be10d0eea32c74ef78d816e1b4ead21de1d78de1f890d033e04
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javax.annotation-api-1.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javax.annotation-api High Vendor jar package name annotation Highest Vendor jar package name javax Highest Vendor Manifest bundle-docurl https://glassfish.java.net Low Vendor Manifest bundle-symbolicname javax.annotation-api Medium Vendor Manifest extension-name javax.annotation Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid javax.annotation-api Highest Vendor pom artifactid javax.annotation-api Low Vendor pom developer id mode Medium Vendor pom developer name Rajiv Mordani Medium Vendor pom developer org Oracle, Inc. Medium Vendor pom groupid javax.annotation Highest Vendor pom name API High Vendor pom name ${extension.name} API High Vendor pom organization name GlassFish Community High Vendor pom organization url https://glassfish.java.net Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://jcp.org/en/jsr/detail?id=250 Highest Product file name javax.annotation-api High Product jar package name annotation Highest Product jar package name javax Highest Product Manifest bundle-docurl https://glassfish.java.net Low Product Manifest Bundle-Name javax.annotation API Medium Product Manifest bundle-symbolicname javax.annotation-api Medium Product Manifest extension-name javax.annotation Medium Product pom artifactid javax.annotation-api Highest Product pom developer id mode Low Product pom developer name Rajiv Mordani Low Product pom developer org Oracle, Inc. Low Product pom groupid javax.annotation Highest Product pom name API High Product pom name ${extension.name} API High Product pom organization name GlassFish Community Low Product pom organization url https://glassfish.java.net Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://jcp.org/en/jsr/detail?id=250 Medium Version file version 1.2 High Version Manifest Bundle-Version 1.2 High Version Manifest Implementation-Version 1.2 High Version pom parent-version 1.2 Low Version pom version 1.2 Highest
Description:
Common Annotations for the JavaTM Platform API License:
CDDL + GPLv2 with classpath exception: https://github.com/javaee/javax.annotation/blob/master/LICENSE File Path: /home/runner/.m2/repository/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar
MD5: 2ab1973eefffaa2aeec47d50b9e40b9d
SHA1: 934c04d3cfef185a8008e7bf34331b79730a9d43
SHA256: e04ba5195bcd555dc95650f7cc614d151e4bcd52d29a10b8aa2197f3ab89ab9b
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
javax.annotation-api-1.3.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name javax.annotation-api High Vendor jar package name annotation Highest Vendor jar package name javax Highest Vendor Manifest automatic-module-name java.annotation Medium Vendor Manifest bundle-docurl https://javaee.github.io/glassfish Low Vendor Manifest bundle-symbolicname javax.annotation-api Medium Vendor Manifest extension-name javax.annotation Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid javax.annotation-api Highest Vendor pom artifactid javax.annotation-api Low Vendor pom developer id ldemichiel Medium Vendor pom developer name Linda De Michiel Medium Vendor pom developer org Oracle Corp. Medium Vendor pom groupid javax.annotation Highest Vendor pom name API High Vendor pom name ${extension.name} API High Vendor pom organization name GlassFish Community High Vendor pom organization url https://javaee.github.io/glassfish Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://jcp.org/en/jsr/detail?id=250 Highest Product file name javax.annotation-api High Product jar package name annotation Highest Product jar package name javax Highest Product Manifest automatic-module-name java.annotation Medium Product Manifest bundle-docurl https://javaee.github.io/glassfish Low Product Manifest Bundle-Name javax.annotation API Medium Product Manifest bundle-symbolicname javax.annotation-api Medium Product Manifest extension-name javax.annotation Medium Product pom artifactid javax.annotation-api Highest Product pom developer id ldemichiel Low Product pom developer name Linda De Michiel Low Product pom developer org Oracle Corp. Low Product pom groupid javax.annotation Highest Product pom name API High Product pom name ${extension.name} API High Product pom organization name GlassFish Community Low Product pom organization url https://javaee.github.io/glassfish Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://jcp.org/en/jsr/detail?id=250 Medium Version file version 1.3.2 High Version Manifest Bundle-Version 1.3.2 High Version Manifest Implementation-Version 1.3.2 High Version pom parent-version 1.3.2 Low Version pom version 1.3.2 Highest
Description:
The javax.inject API License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/javax/inject/javax.inject/1/javax.inject-1.jar
MD5: 289075e48b909e9e74e6c915b3631d2e
SHA1: 6975da39a7040257bd51d21a231b76c915872d38
SHA256: 91c77044a50c481636c32d916fd89c9118a72195390452c81065080f957de7ff
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javax.inject-1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javax.inject-1 High Vendor jar package name inject Highest Vendor jar package name inject Low Vendor jar package name javax Highest Vendor jar package name javax Low Vendor pom artifactid javax.inject Highest Vendor pom artifactid javax.inject Low Vendor pom groupid javax.inject Highest Vendor pom name javax.inject High Vendor pom url http://code.google.com/p/atinject/ Highest Product file name javax.inject-1 High Product jar package name inject Highest Product jar package name inject Low Product jar package name javax Highest Product pom artifactid javax.inject Highest Product pom groupid javax.inject Highest Product pom name javax.inject High Product pom url http://code.google.com/p/atinject/ Medium Version file version 1 Medium Version pom version 1 Highest
Description:
Injection API (JSR 330) version repackaged as OSGi bundle License:
https://glassfish.java.net/nonav/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/org/glassfish/hk2/external/javax.inject/2.5.0-b32/javax.inject-2.5.0-b32.jar
MD5: b7e8633eb1e5aad9f44a37a3f3bfa8f5
SHA1: b2fa50c8186a38728c35fe6a9da57ce4cc806923
SHA256: 437c92cf50a0efa6b501b8939b5b92ede7cfe4455cf06b68ec69d1b21ab921ed
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javax.inject-2.5.0-b32.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javax.inject High Vendor jar package name inject Highest Vendor jar package name javax Highest Vendor Manifest bundle-docurl http://www.oracle.com Low Vendor Manifest bundle-symbolicname org.glassfish.hk2.external.javax.inject Medium Vendor pom artifactid javax.inject Highest Vendor pom artifactid javax.inject Low Vendor pom groupid org.glassfish.hk2.external Highest Vendor pom name javax.inject: as OSGi bundle High Vendor pom name javax.inject:${javax-inject.version} as OSGi bundle High Vendor pom parent-artifactid external Low Vendor pom parent-groupid org.glassfish.hk2 Medium Product file name javax.inject High Product jar package name inject Highest Product jar package name javax Highest Product Manifest bundle-docurl http://www.oracle.com Low Product Manifest Bundle-Name javax.inject:1 as OSGi bundle Medium Product Manifest bundle-symbolicname org.glassfish.hk2.external.javax.inject Medium Product pom artifactid javax.inject Highest Product pom groupid org.glassfish.hk2.external Highest Product pom name javax.inject: as OSGi bundle High Product pom name javax.inject:${javax-inject.version} as OSGi bundle High Product pom parent-artifactid external Medium Product pom parent-groupid org.glassfish.hk2 Medium Version pom version 2.5.0-b32 Highest
Description:
The Java Data Objects API (JDO) : a standard interface-based Java model abstraction of persistence, developed by the JCP. License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/datanucleus/javax.jdo/3.2.0-m3/javax.jdo-3.2.0-m3.jar
MD5: 53e1eac14fa3a58cf0054f03373af8f4
SHA1: c911b22710a8f77541a966615033b4ab943fd6f3
SHA256: b0e338881376e4588f7564ae2dcc91737148e7c950873f6b0b899cbf0feef80b
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javax.jdo-3.2.0-m3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javax.jdo High Vendor jar package name javax Highest Vendor jar package name jdo Highest Vendor Manifest bundle-symbolicname javax.jdo;singleton:=true Medium Vendor pom artifactid javax.jdo Highest Vendor pom artifactid javax.jdo Low Vendor pom groupid org.datanucleus Highest Vendor pom name JDO API High Vendor pom parent-artifactid datanucleus-maven-parent Low Product file name javax.jdo High Product jar package name javax Highest Product jar package name jdo Highest Product Manifest Bundle-Name JDO API Medium Product Manifest bundle-symbolicname javax.jdo;singleton:=true Medium Product pom artifactid javax.jdo Highest Product pom groupid org.datanucleus Highest Product pom name JDO API High Product pom parent-artifactid datanucleus-maven-parent Medium Version pom parent-version 3.2.0-m3 Low Version pom version 3.2.0-m3 Highest
Description:
Default provider for JSR 353:Java API for Processing JSON License:
https://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/org/glassfish/javax.json/1.0.4/javax.json-1.0.4.jar
MD5: 569870f975deeeb6691fcb9bc02a9555
SHA1: 3178f73569fd7a1e5ffc464e680f7a8cc784b85a
SHA256: 0e1dec40a1ede965941251eda968aeee052cc4f50378bc316cc48e8159bdbeb4
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
javax.json-1.0.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name javax.json High Vendor jar package name api Highest Vendor jar package name glassfish Highest Vendor jar package name javax Highest Vendor jar package name json Highest Vendor Manifest bundle-docurl http://www.oracle.com Low Vendor Manifest bundle-symbolicname org.glassfish.javax.json Medium Vendor Manifest extension-name javax.json Medium Vendor pom artifactid javax.json Highest Vendor pom artifactid javax.json Low Vendor pom groupid org.glassfish Highest Vendor pom name JSR 353 (JSON Processing) Default Provider High Vendor pom parent-artifactid json Low Vendor pom url http://jsonp.java.net Highest Product file name javax.json High Product jar package name api Highest Product jar package name glassfish Highest Product jar package name javax Highest Product jar package name json Highest Product Manifest bundle-docurl http://www.oracle.com Low Product Manifest Bundle-Name JSR 353 (JSON Processing) Default Provider Medium Product Manifest bundle-symbolicname org.glassfish.javax.json Medium Product Manifest extension-name javax.json Medium Product pom artifactid javax.json Highest Product pom groupid org.glassfish Highest Product pom name JSR 353 (JSON Processing) Default Provider High Product pom parent-artifactid json Medium Product pom url http://jsonp.java.net Medium Version file version 1.0.4 High Version Manifest Bundle-Version 1.0.4 High Version Manifest Implementation-Version 1.0.4 High Version pom version 1.0.4 Highest
Description:
Java(TM) Servlet 3.1 API Design Specification License:
CDDL + GPLv2 with classpath exception: https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /home/runner/.m2/repository/javax/servlet/javax.servlet-api/3.1.0/javax.servlet-api-3.1.0.jar
MD5: 79de69e9f5ed8c7fcb8342585732bbf7
SHA1: 3cd63d075497751784b2fa84be59432f4905bf7c
SHA256: af456b2dd41c4e82cf54f3e743bc678973d9fe35bd4d3071fa05c7e5333b8482
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javax.servlet-api-3.1.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javax.servlet-api High Vendor jar package name javax Highest Vendor jar package name servlet Highest Vendor Manifest bundle-docurl https://glassfish.dev.java.net Low Vendor Manifest bundle-symbolicname javax.servlet-api Medium Vendor Manifest extension-name javax.servlet Medium Vendor Manifest Implementation-Vendor GlassFish Community High Vendor Manifest Implementation-Vendor-Id org.glassfish Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid javax.servlet-api Highest Vendor pom artifactid javax.servlet-api Low Vendor pom developer id mode Medium Vendor pom developer id swchan2 Medium Vendor pom developer name Rajiv Mordani Medium Vendor pom developer name Shing Wai Chan Medium Vendor pom developer org Oracle Medium Vendor pom groupid javax.servlet Highest Vendor pom name Java Servlet API High Vendor pom organization name GlassFish Community High Vendor pom organization url https://glassfish.dev.java.net Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://servlet-spec.java.net Highest Vendor pom (hint) developer org sun Medium Product file name javax.servlet-api High Product jar package name javax Highest Product jar package name servlet Highest Product Manifest bundle-docurl https://glassfish.dev.java.net Low Product Manifest Bundle-Name Java Servlet API Medium Product Manifest bundle-symbolicname javax.servlet-api Medium Product Manifest extension-name javax.servlet Medium Product pom artifactid javax.servlet-api Highest Product pom developer id mode Low Product pom developer id swchan2 Low Product pom developer name Rajiv Mordani Low Product pom developer name Shing Wai Chan Low Product pom developer org Oracle Low Product pom groupid javax.servlet Highest Product pom name Java Servlet API High Product pom organization name GlassFish Community Low Product pom organization url https://glassfish.dev.java.net Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://servlet-spec.java.net Medium Version file version 3.1.0 High Version Manifest Bundle-Version 3.1.0 High Version Manifest Implementation-Version 3.1.0 High Version pom parent-version 3.1.0 Low Version pom version 3.1.0 Highest
Description:
Java.net - The Source for Java Technology Collaboration License:
CDDL + GPLv2 with classpath exception: http://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /home/runner/.m2/repository/org/glassfish/web/javax.servlet.jsp/2.3.2/javax.servlet.jsp-2.3.2.jar
MD5: fa21e48138803802e3ea2293b79fda47
SHA1: 613f624102267b1397e845b3181a72273bd6f399
SHA256: 197a9f8ed0b8c72a900e1dd3045ec03e0dcc33a2c9615eb0965bbf79df1cc460
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javax.servlet.jsp-2.3.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javax.servlet.jsp High Vendor jar package name glassfish Highest Vendor jar package name jsp Highest Vendor jar package name servlet Highest Vendor Manifest bundle-docurl http://glassfish.org Low Vendor Manifest bundle-symbolicname org.glassfish.web.javax.servlet.jsp Medium Vendor Manifest extension-name javax.servlet.jsp Medium Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid javax.servlet.jsp Highest Vendor pom artifactid javax.servlet.jsp Low Vendor pom developer id kchung Medium Vendor pom developer name Kin-man Chung Medium Vendor pom developer org Oracle Corporation Medium Vendor pom groupid org.glassfish.web Highest Vendor pom name JSP implementation High Vendor pom organization name GlassFish Community High Vendor pom organization url http://glassfish.org Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://jsp.java.net Highest Product file name javax.servlet.jsp High Product jar package name glassfish Highest Product jar package name jsp Highest Product jar package name servlet Highest Product Manifest bundle-docurl http://glassfish.org Low Product Manifest Bundle-Name JSP implementation Medium Product Manifest bundle-symbolicname org.glassfish.web.javax.servlet.jsp Medium Product Manifest extension-name javax.servlet.jsp Medium Product pom artifactid javax.servlet.jsp Highest Product pom developer id kchung Low Product pom developer name Kin-man Chung Low Product pom developer org Oracle Corporation Low Product pom groupid org.glassfish.web Highest Product pom name JSP implementation High Product pom organization name GlassFish Community Low Product pom organization url http://glassfish.org Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://jsp.java.net Medium Version file version 2.3.2 High Version Manifest Bundle-Version 2.3.2 High Version Manifest Implementation-Version 2.3.2 High Version pom parent-version 2.3.2 Low Version pom version 2.3.2 Highest
Description:
Java.net - The Source for Java Technology Collaboration License:
CDDL + GPLv2 with classpath exception: http://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /home/runner/.m2/repository/javax/servlet/jsp/javax.servlet.jsp-api/2.3.1/javax.servlet.jsp-api-2.3.1.jar
MD5: 2c407d9df1dc0ca76058ae1602e99f08
SHA1: 95c630902565feda8155eb32d46064ef348435fc
SHA256: b1306f5cc721e25e290d2b244af7bfb870a7e072bd32f17350712d1626a74f4b
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javax.servlet.jsp-api-2.3.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javax.servlet.jsp-api High Vendor jar package name javax Highest Vendor jar package name jsp Highest Vendor jar package name servlet Highest Vendor Manifest bundle-docurl http://glassfish.org Low Vendor Manifest bundle-symbolicname javax.servlet.jsp-api Medium Vendor Manifest extension-name javax.servlet.jsp Medium Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid javax.servlet.jsp-api Highest Vendor pom artifactid javax.servlet.jsp-api Low Vendor pom developer id kchung Medium Vendor pom developer name Kin-man Chung Medium Vendor pom developer org Oracle Corporation Medium Vendor pom groupid javax.servlet.jsp Highest Vendor pom name JavaServer Pages(TM) API High Vendor pom organization name GlassFish Community High Vendor pom organization url http://glassfish.org Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://jsp.java.net Highest Product file name javax.servlet.jsp-api High Product jar package name javax Highest Product jar package name jsp Highest Product jar package name servlet Highest Product Manifest bundle-docurl http://glassfish.org Low Product Manifest Bundle-Name JavaServer Pages(TM) API Medium Product Manifest bundle-symbolicname javax.servlet.jsp-api Medium Product Manifest extension-name javax.servlet.jsp Medium Product pom artifactid javax.servlet.jsp-api Highest Product pom developer id kchung Low Product pom developer name Kin-man Chung Low Product pom developer org Oracle Corporation Low Product pom groupid javax.servlet.jsp Highest Product pom name JavaServer Pages(TM) API High Product pom organization name GlassFish Community Low Product pom organization url http://glassfish.org Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://jsp.java.net Medium Version file version 2.3.1 High Version Manifest Bundle-Version 2.3.1 High Version Manifest Implementation-Version 2.3.1 High Version pom parent-version 2.3.1 Low Version pom version 2.3.1 Highest
Description:
Java API for RESTful Web Services (JAX-RS) License:
CDDL 1.1: http://glassfish.java.net/public/CDDL+GPL_1_1.html
GPL2 w/ CPE: http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/javax/ws/rs/javax.ws.rs-api/2.0.1/javax.ws.rs-api-2.0.1.jar
MD5: edcd111cf4d3ba8ac8e1f326efc37a17
SHA1: 104e9c2b5583cfcfeac0402316221648d6d8ea6b
SHA256: 38607d626f2288d8fbc1b1f8a62c369e63806d9a313ac7cbc5f9d6c94f4b466d
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javax.ws.rs-api-2.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javax.ws.rs-api High Vendor hint analyzer vendor web services Medium Vendor jar package name javax Highest Vendor jar package name rs Highest Vendor jar package name ws Highest Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor Manifest bundle-symbolicname javax.ws.rs-api Medium Vendor Manifest extension-name javax.ws.rs Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid javax.ws.rs-api Highest Vendor pom artifactid javax.ws.rs-api Low Vendor pom developer email m_potociar@java.net Low Vendor pom developer email spericas@java.net Low Vendor pom developer id Marek Medium Vendor pom developer id Santiago Medium Vendor pom developer name Marek Potociar Medium Vendor pom developer name Santiago Pericas-Geertsen Medium Vendor pom developer org Oracle Medium Vendor pom developer org URL http://jax-rs-spec.java.net Medium Vendor pom groupid javax.ws.rs Highest Vendor pom name javax.ws.rs-api High Vendor pom organization name Oracle Corporation High Vendor pom organization url http://www.oracle.com/ Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://jax-rs-spec.java.net Highest Vendor pom (hint) developer org sun Medium Product file name javax.ws.rs-api High Product hint analyzer product web services Medium Product jar package name javax Highest Product jar package name rs Highest Product jar package name ws Highest Product Manifest bundle-docurl http://www.oracle.com/ Low Product Manifest Bundle-Name javax.ws.rs-api Medium Product Manifest bundle-symbolicname javax.ws.rs-api Medium Product Manifest extension-name javax.ws.rs Medium Product pom artifactid javax.ws.rs-api Highest Product pom developer email m_potociar@java.net Low Product pom developer email spericas@java.net Low Product pom developer id Marek Low Product pom developer id Santiago Low Product pom developer name Marek Potociar Low Product pom developer name Santiago Pericas-Geertsen Low Product pom developer org Oracle Low Product pom developer org URL http://jax-rs-spec.java.net Low Product pom groupid javax.ws.rs Highest Product pom name javax.ws.rs-api High Product pom organization name Oracle Corporation Low Product pom organization url http://www.oracle.com/ Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://jax-rs-spec.java.net Medium Version file version 2.0.1 High Version Manifest Bundle-Version 2.0.1 High Version Manifest Implementation-Version 2.0.1 High Version pom parent-version 2.0.1 Low Version pom version 2.0.1 Highest
Description:
Javolution - Java Solution for Real-Time and Embedded Systems.
This project uses template classes to generates java code for various versions
of the Java run-time (e.g. J2ME, 1.4, GCJ, 1.5). The default maven compilation
builds OSGI bundle for Java 1.5+ (parameterized classes).
For others targets the ant script should be used directly (e.g. "ant j2me").
License:
BSD License: http://javolution.org/LICENSE.txt File Path: /home/runner/.m2/repository/javolution/javolution/5.5.1/javolution-5.5.1.jar
MD5: 1b7257da4690bada3cac7293985f8588
SHA1: 3fcba819cdb7861728405963ddc4b2755ab182e5
SHA256: 6de167427fb5ad34fe533cb36a8b3427fa6052a2b99781874396ed5cca9f8ed1
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
javolution-5.5.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name javolution High Vendor jar package name javolution Highest Vendor Manifest bundle-docurl http://javolution.org Low Vendor Manifest bundle-symbolicname javolution Medium Vendor pom artifactid javolution Highest Vendor pom artifactid javolution Low Vendor pom developer email jean-marie@dautelle.com Low Vendor pom developer id dautelle Medium Vendor pom developer name Jean-Marie Dautelle Medium Vendor pom developer org Thales Medium Vendor pom developer org URL http://www.thalesraytheon-fr.com Medium Vendor pom groupid javolution Highest Vendor pom name Javolution High Vendor pom organization name Javolution High Vendor pom organization url http://javolution.org Medium Vendor pom url http://javolution.org Highest Product file name javolution High Product jar package name javolution Highest Product Manifest bundle-docurl http://javolution.org Low Product Manifest Bundle-Name Javolution Medium Product Manifest bundle-symbolicname javolution Medium Product pom artifactid javolution Highest Product pom developer email jean-marie@dautelle.com Low Product pom developer id dautelle Low Product pom developer name Jean-Marie Dautelle Low Product pom developer org Thales Low Product pom developer org URL http://www.thalesraytheon-fr.com Low Product pom groupid javolution Highest Product pom name Javolution High Product pom organization name Javolution Low Product pom organization url http://javolution.org Low Product pom url http://javolution.org Medium Version file version 5.5.1 High Version Manifest Bundle-Version 5.5.1 High Version pom version 5.5.1 Highest
Description:
JAXB (JSR 222) API License:
CDDL 1.1: https://glassfish.java.net/public/CDDL+GPL_1_1.html
GPL2 w/ CPE: https://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/javax/xml/bind/jaxb-api/2.2.11/jaxb-api-2.2.11.jar
MD5: 5983d1e2ec1a9b0604575cd9e9582591
SHA1: 32274d4244967ff43e7a5d967743d94ed3d2aea7
SHA256: 273d82f8653b53ad9d00ce2b2febaef357e79a273560e796ff3fcfec765f8910
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jaxb-api-2.2.11.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jaxb-api High Vendor jar package name bind Highest Vendor jar package name javax Highest Vendor jar package name jaxb Highest Vendor jar package name xml Highest Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor Manifest bundle-symbolicname jaxb-api Medium Vendor Manifest extension-name javax.xml.bind Medium Vendor Manifest implementation-build-id tags/jaxb-api-2.2.11-1631, 2013-09-06T10:10:58+0000 Low Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid jaxb-api Highest Vendor pom artifactid jaxb-api Low Vendor pom developer email iaroslav.savytskyi@oracle.com Low Vendor pom developer email martin.grebac@oracle.com Low Vendor pom developer name Iaroslav Savytskyi Medium Vendor pom developer name Martin Grebac Medium Vendor pom developer org Oracle Corporation Medium Vendor pom groupid javax.xml.bind Highest Vendor pom name Java Architecture for XML Binding High Vendor pom organization name Oracle Corporation High Vendor pom organization url http://www.oracle.com/ Medium Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Vendor pom url http://jaxb.java.net/ Highest Product file name jaxb-api High Product jar package name bind Highest Product jar package name javax Highest Product jar package name jaxb Highest Product jar package name xml Highest Product Manifest bundle-docurl http://www.oracle.com/ Low Product Manifest Bundle-Name jaxb-api Medium Product Manifest bundle-symbolicname jaxb-api Medium Product Manifest extension-name javax.xml.bind Medium Product Manifest implementation-build-id tags/jaxb-api-2.2.11-1631, 2013-09-06T10:10:58+0000 Low Product Manifest specification-title Java Architecture for XML Binding Medium Product pom artifactid jaxb-api Highest Product pom developer email iaroslav.savytskyi@oracle.com Low Product pom developer email martin.grebac@oracle.com Low Product pom developer name Iaroslav Savytskyi Low Product pom developer name Martin Grebac Low Product pom developer org Oracle Corporation Low Product pom groupid javax.xml.bind Highest Product pom name Java Architecture for XML Binding High Product pom organization name Oracle Corporation Low Product pom organization url http://www.oracle.com/ Low Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Product pom url http://jaxb.java.net/ Medium Version file version 2.2.11 High Version Manifest Bundle-Version 2.2.11 High Version Manifest specification-version 2.2.11 High Version pom parent-version 2.2.11 Low Version pom version 2.2.11 Highest
Description:
JAXB (JSR 222) Reference Implementation License:
http://www.eclipse.org/org/documents/edl-v10.php File Path: /home/runner/.m2/repository/org/glassfish/jaxb/jaxb-runtime/2.3.9/jaxb-runtime-2.3.9.jar
MD5: 9383286160dde0e1a0fec25aee8a44ef
SHA1: 9d42b4f19df7e20b625b2044a7de81d95f6dff29
SHA256: ba88e5bde7c0d878c3e1f2ec2fcabaf51d201eaf93b3bb9cfecfc1f11b2304d4
Referenced In Projects/Scopes: shardingsphere-test-fixture-database:compile shardingsphere-test-it-parser:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-it:compile shardingsphere-test-util:compile shardingsphere-test-e2e-agent-plugins-logging:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-plugins:compile shardingsphere-test-e2e-operation:compile shardingsphere-test-it-yaml:compile shardingsphere-test-fixture:compile shardingsphere-test-e2e-agent-plugins-tracing:compile shardingsphere-test-it-spi:compile shardingsphere-test-fixture-infra:compile shardingsphere-test-e2e-env:compile shardingsphere-test:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-it-optimizer:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-test-e2e-agent-fixture:compile shardingsphere-test-native:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-agent:compile shardingsphere-test-it-rewriter:compile shardingsphere-test-e2e-agent-plugins-metrics:compile shardingsphere-test-e2e-pipeline:compile jaxb-runtime-2.3.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-native@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-rewriter@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture-infra@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-yaml@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-operation@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture-database@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jaxb-runtime High Vendor jar package name bind Highest Vendor jar package name com Highest Vendor jar package name sun Highest Vendor jar package name xml Highest Vendor jar (hint) package name oracle Highest Vendor Manifest bundle-docurl https://www.eclipse.org Low Vendor Manifest bundle-symbolicname org.glassfish.jaxb.runtime Medium Vendor Manifest git-revision 143ffd0 Low Vendor Manifest implementation-build-id 2.3.9 - 143ffd0 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.glassfish.jaxb Medium Vendor Manifest multi-release true Low Vendor pom artifactid jaxb-runtime Highest Vendor pom artifactid jaxb-runtime Low Vendor pom groupid org.glassfish.jaxb Highest Vendor pom name JAXB Runtime High Vendor pom parent-artifactid jaxb-runtime-parent Low Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom url https://eclipse-ee4j.github.io/jaxb-ri/ Highest Product file name jaxb-runtime High Product jar package name 9 Highest Product jar package name bind Highest Product jar package name com Highest Product jar package name sun Highest Product jar package name xml Highest Product Manifest bundle-docurl https://www.eclipse.org Low Product Manifest Bundle-Name JAXB Runtime Medium Product Manifest bundle-symbolicname org.glassfish.jaxb.runtime Medium Product Manifest git-revision 143ffd0 Low Product Manifest implementation-build-id 2.3.9 - 143ffd0 Low Product Manifest Implementation-Title Jakarta XML Binding Implementation High Product Manifest multi-release true Low Product Manifest specification-title Jakarta XML Binding Medium Product pom artifactid jaxb-runtime Highest Product pom groupid org.glassfish.jaxb Highest Product pom name JAXB Runtime High Product pom parent-artifactid jaxb-runtime-parent Medium Product pom parent-groupid com.sun.xml.bind.mvn Medium Product pom url https://eclipse-ee4j.github.io/jaxb-ri/ Medium Version file version 2.3.9 High Version Manifest build-id 2.3.9 Medium Version Manifest Bundle-Version 2.3.9 High Version Manifest implementation-build-id 2.3.9 Low Version Manifest Implementation-Version 2.3.9 High Version Manifest major-version 2.3.9 Medium Version pom version 2.3.9 Highest
Description:
JSR 322: Java(TM) EE Connector Architecture 1.7 API License:
Common Development and Distribution License: http://repository.jboss.org/licenses/cddl.txt
GNU General Public License, Version 2 with the Classpath Exception: http://repository.jboss.org/licenses/gpl-2.0-ce.txt File Path: /home/runner/.m2/repository/org/jboss/spec/javax/resource/jboss-connector-api_1.7_spec/1.0.0.Final/jboss-connector-api_1.7_spec-1.0.0.Final.jar
MD5: 44c426640dcc885a6c178cbd5e4fee11
SHA1: 2113100f3aac47f62a948e4a00a2ddfa6497fb62
SHA256: f50260de1712b7b3838e9733dab70ec3536486caeb196af702a554d2587f2a5e
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-transaction-xa-narayana:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile jboss-connector-api_1.7_spec-1.0.0.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jboss-connector-api_1.7_spec-1.0.0.Final High Vendor hint analyzer vendor redhat Highest Vendor jar package name connector Highest Vendor jar package name javax Highest Vendor jar package name resource Highest Vendor Manifest build-timestamp Wed, 9 Oct 2013 14:16:13 -0400 Low Vendor Manifest bundle-docurl http://www.jboss.org Low Vendor Manifest bundle-symbolicname org.jboss.spec.javax.resource.jboss-connector-api_1.7_spec Medium Vendor Manifest implementation-url http://www.jboss.org/jboss-connector-api_1.7_spec Low Vendor Manifest Implementation-Vendor JBoss by Red Hat High Vendor Manifest Implementation-Vendor-Id org.jboss.spec.javax.resource Medium Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor Manifest specification-vendor Oracle Low Vendor Manifest (hint) specification-vendor sun Low Vendor pom artifactid jboss-connector-api_1.7_spec Highest Vendor pom artifactid jboss-connector-api_1.7_spec Low Vendor pom groupid org.jboss.spec.javax.resource Highest Vendor pom name Java(TM) EE Connector Architecture 1.7 API High Vendor pom parent-artifactid jboss-parent Low Vendor pom parent-groupid org.jboss Medium Product file name jboss-connector-api_1.7_spec-1.0.0.Final High Product jar package name connector Highest Product jar package name javax Highest Product jar package name resource Highest Product Manifest build-timestamp Wed, 9 Oct 2013 14:16:13 -0400 Low Product Manifest bundle-docurl http://www.jboss.org Low Product Manifest Bundle-Name Java(TM) EE Connector Architecture 1.7 API Medium Product Manifest bundle-symbolicname org.jboss.spec.javax.resource.jboss-connector-api_1.7_spec Medium Product Manifest Implementation-Title Java(TM) EE Connector Architecture 1.7 API High Product Manifest implementation-url http://www.jboss.org/jboss-connector-api_1.7_spec Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title JSR 322: Java(TM) EE Connector Architecture Medium Product pom artifactid jboss-connector-api_1.7_spec Highest Product pom groupid org.jboss.spec.javax.resource Highest Product pom name Java(TM) EE Connector Architecture 1.7 API High Product pom parent-artifactid jboss-parent Medium Product pom parent-groupid org.jboss Medium Version Manifest Bundle-Version 1.0.0.Final High Version Manifest Implementation-Version 1.0.0.Final High Version pom parent-version 1.0.0.Final Low Version pom version 1.0.0.Final Highest
Description:
The JBoss Logging Framework License:
Apache License, version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/jboss/logging/jboss-logging/3.2.1.Final/jboss-logging-3.2.1.Final.jar
MD5: 841756c617979782d7f4f708a04f05de
SHA1: fedf11b3d4665a434b554a5891fe7f208f029f45
SHA256: a3b0ffa8ae2b2f2387ebdfdce29086d3955d2a46ce7da802c2ba6ae47fa2f1bf
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-transaction-xa-narayana:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile jboss-logging-3.2.1.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-narayana@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jboss-logging High Vendor hint analyzer vendor redhat Highest Vendor jar package name jboss Highest Vendor jar package name logging Highest Vendor Manifest build-timestamp Tue, 20 Jan 2015 08:22:09 -0800 Low Vendor Manifest bundle-docurl http://www.jboss.org Low Vendor Manifest bundle-symbolicname org.jboss.logging.jboss-logging Medium Vendor Manifest implementation-url http://www.jboss.org Low Vendor Manifest Implementation-Vendor JBoss by Red Hat High Vendor Manifest Implementation-Vendor-Id org.jboss.logging Medium Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor Manifest specification-vendor JBoss by Red Hat Low Vendor pom artifactid jboss-logging Highest Vendor pom artifactid jboss-logging Low Vendor pom groupid org.jboss.logging Highest Vendor pom name JBoss Logging 3 High Vendor pom parent-artifactid jboss-parent Low Vendor pom parent-groupid org.jboss Medium Vendor pom url http://www.jboss.org Highest Product file name jboss-logging High Product jar package name jboss Highest Product jar package name logging Highest Product Manifest build-timestamp Tue, 20 Jan 2015 08:22:09 -0800 Low Product Manifest bundle-docurl http://www.jboss.org Low Product Manifest Bundle-Name JBoss Logging 3 Medium Product Manifest bundle-symbolicname org.jboss.logging.jboss-logging Medium Product Manifest Implementation-Title JBoss Logging 3 High Product Manifest implementation-url http://www.jboss.org Low Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title JBoss Logging 3 Medium Product pom artifactid jboss-logging Highest Product pom groupid org.jboss.logging Highest Product pom name JBoss Logging 3 High Product pom parent-artifactid jboss-parent Medium Product pom parent-groupid org.jboss Medium Product pom url http://www.jboss.org Medium Version Manifest Bundle-Version 3.2.1.Final High Version Manifest Implementation-Version 3.2.1.Final High Version pom parent-version 3.2.1.Final Low Version pom version 3.2.1.Final Highest
Description:
The Java Transaction 1.2 API classes License:
Common Development and Distribution License: http://repository.jboss.org/licenses/cddl.txt
GNU General Public License, Version 2 with the Classpath Exception: http://repository.jboss.org/licenses/gpl-2.0-ce.txt File Path: /home/runner/.m2/repository/org/jboss/spec/javax/transaction/jboss-transaction-api_1.2_spec/1.0.0.Alpha3/jboss-transaction-api_1.2_spec-1.0.0.Alpha3.jar
MD5: b9f339eb4bbb033401cced9e66889fdf
SHA1: 4e2bde1ffb9578de679abaf0a9a5158a02f15fb4
SHA256: 06a2d5568c7b5c069a992756673fbc3490335926e06a33de44fe87e31e0ec1ac
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-transaction-xa-narayana:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile jboss-transaction-api_1.2_spec-1.0.0.Alpha3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final pkg:maven/org.jboss/jboss-transaction-spi@7.6.1.Final pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jboss-transaction-api_1.2_spec-1.0.0.Alpha3 High Vendor hint analyzer vendor redhat Highest Vendor jar package name javax Highest Vendor jar package name transaction Highest Vendor Manifest build-timestamp Sun, 26 May 2013 08:23:49 -0400 Low Vendor Manifest bundle-docurl http://www.jboss.org Low Vendor Manifest bundle-symbolicname org.jboss.spec.javax.transaction.jboss-transaction-api_1.2_spec Medium Vendor Manifest implementation-url http://www.jboss.org/jboss-transaction-api_1.2_spec Low Vendor Manifest Implementation-Vendor JBoss by Red Hat High Vendor Manifest Implementation-Vendor-Id org.jboss.spec.javax.transaction Medium Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor pom artifactid jboss-transaction-api_1.2_spec Highest Vendor pom artifactid jboss-transaction-api_1.2_spec Low Vendor pom groupid org.jboss.spec.javax.transaction Highest Vendor pom name Java Transaction API High Vendor pom parent-artifactid jboss-parent Low Vendor pom parent-groupid org.jboss Medium Product file name jboss-transaction-api_1.2_spec-1.0.0.Alpha3 High Product jar package name javax Highest Product jar package name transaction Highest Product Manifest build-timestamp Sun, 26 May 2013 08:23:49 -0400 Low Product Manifest bundle-docurl http://www.jboss.org Low Product Manifest Bundle-Name Java Transaction API Medium Product Manifest bundle-symbolicname org.jboss.spec.javax.transaction.jboss-transaction-api_1.2_spec Medium Product Manifest Implementation-Title Java Transaction API High Product Manifest implementation-url http://www.jboss.org/jboss-transaction-api_1.2_spec Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title JSR 907: Java Transaction API (JTA) Medium Product pom artifactid jboss-transaction-api_1.2_spec Highest Product pom groupid org.jboss.spec.javax.transaction Highest Product pom name Java Transaction API High Product pom parent-artifactid jboss-parent Medium Product pom parent-groupid org.jboss Medium Version Manifest Bundle-Version 1.0.0.Alpha3 High Version Manifest Implementation-Version 1.0.0.Alpha3 High Version pom parent-version 1.0.0.Alpha3 Low Version pom version 1.0.0.Alpha3 Highest
Description:
The Java Transaction SPI classes File Path: /home/runner/.m2/repository/org/jboss/jboss-transaction-spi/7.6.1.Final/jboss-transaction-spi-7.6.1.Final.jarMD5: cfd94cfa601498583a9dbb65d99a58c4SHA1: 0465cf6bebdcb268188f350d225d67201728d01fSHA256: d174f504599a628449a6501c178161b823eadd377ae2603215823097a7b1f21eReferenced In Projects/Scopes:
shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-transaction-xa-narayana:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile jboss-transaction-spi-7.6.1.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-narayana@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jboss-transaction-spi High Vendor hint analyzer vendor redhat Highest Vendor jar package name jboss Highest Vendor Manifest implementation-url http://www.jboss.org Low Vendor Manifest Implementation-Vendor JBoss by Red Hat High Vendor Manifest Implementation-Vendor-Id org.jboss Medium Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor Manifest specification-vendor JBoss by Red Hat Low Vendor pom artifactid jboss-transaction-spi Highest Vendor pom artifactid jboss-transaction-spi Low Vendor pom groupid org.jboss Highest Vendor pom name JBoss Transaction SPI High Vendor pom parent-artifactid jboss-transaction-spi-parent Low Vendor pom url http://www.jboss.org Highest Product file name jboss-transaction-spi High Product jar package name jboss Highest Product Manifest Implementation-Title JBoss Transaction SPI High Product Manifest implementation-url http://www.jboss.org Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title JBoss Transaction SPI Medium Product pom artifactid jboss-transaction-spi Highest Product pom groupid org.jboss Highest Product pom name JBoss Transaction SPI High Product pom parent-artifactid jboss-transaction-spi-parent Medium Product pom url http://www.jboss.org Medium Version Manifest Implementation-Version 7.6.1.Final High Version pom version 7.6.1.Final Highest
Description:
A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/github/stephenc/jcip/jcip-annotations/1.0-1/jcip-annotations-1.0-1.jar
MD5: d62dbfa8789378457ada685e2f614846
SHA1: ef31541dd28ae2cefdd17c7ebf352d93e9058c63
SHA256: 4fccff8382aafc589962c4edb262f6aa595e34f1e11e61057d1c6a96e8fc7323
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jcip-annotations-1.0-1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jcip-annotations High Vendor jar package name annotations Highest Vendor jar package name annotations Low Vendor jar package name jcip Highest Vendor jar package name jcip Low Vendor jar package name net Low Vendor pom artifactid jcip-annotations Highest Vendor pom artifactid jcip-annotations Low Vendor pom developer id stephenc Medium Vendor pom developer name Stephen Connolly Medium Vendor pom groupid com.github.stephenc.jcip Highest Vendor pom name JCIP Annotations under Apache License High Vendor pom url http://stephenc.github.com/jcip-annotations Highest Product file name jcip-annotations High Product jar package name annotations Highest Product jar package name annotations Low Product jar package name jcip Highest Product jar package name jcip Low Product pom artifactid jcip-annotations Highest Product pom developer id stephenc Low Product pom developer name Stephen Connolly Low Product pom groupid com.github.stephenc.jcip Highest Product pom name JCIP Annotations under Apache License High Product pom url http://stephenc.github.com/jcip-annotations Medium Version pom version 1.0-1 Highest
Description:
Byte based encoding support library for java
License:
MIT License: http://www.opensource.org/licenses/mit-license.php File Path: /home/runner/.m2/repository/org/jruby/jcodings/jcodings/1.0.18/jcodings-1.0.18.jar
MD5: e67656ce96abd4a1318e8a5ad31aff27
SHA1: e2c76a19f00128bb1806207e2989139bfb45f49d
SHA256: f085a8026f23b8a77dc95946b88f4e4439ed9f78d98b7ddea92ee9d339d6c647
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jcodings-1.0.18.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jcodings High Vendor jar package name encoding Highest Vendor jar package name jcodings Highest Vendor pom artifactid jcodings Highest Vendor pom artifactid jcodings Low Vendor pom developer email lopx@gazeta.pl Low Vendor pom developer id lopex Medium Vendor pom developer name Marcin Mielzynski Medium Vendor pom groupid org.jruby.jcodings Highest Vendor pom name JCodings High Product file name jcodings High Product jar package name encoding Highest Product jar package name jcodings Highest Product Manifest Implementation-Title JCodings (Byte based encoding support library for java) High Product pom artifactid jcodings Highest Product pom developer email lopx@gazeta.pl Low Product pom developer id lopex Low Product pom developer name Marcin Mielzynski Low Product pom groupid org.jruby.jcodings Highest Product pom name JCodings High Version file version 1.0.18 High Version pom version 1.0.18 Highest
Description:
The Java Data Objects (JDO) API is a standard interface-based Java model abstraction of persistence, developed as Java Specification Request 243 under the auspices of the Java Community Process. License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/javax/jdo/jdo-api/3.0.1/jdo-api-3.0.1.jar
MD5: 978ae9726514457b8cfe8a3ba1c17ca5
SHA1: 058e7a538e020b73871e232eeb064835fd98a492
SHA256: 2a2e63d44a4d7fe267650d08431218648adee14f725df3896d09db3084d7a2f2
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jdo-api-3.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jdo-api High Vendor jar package name javax Highest Vendor jar package name jdo Highest Vendor Manifest bundle-symbolicname javax.jdo Medium Vendor Manifest Implementation-Vendor Apache Software Foundation High Vendor manifest: javax/jdo Implementation-Vendor Apache Software Foundation Medium Vendor pom artifactid jdo-api Highest Vendor pom artifactid jdo-api Low Vendor pom developer email brianm@apache.org Low Vendor pom developer email Craig.Russell@Sun.COM Low Vendor pom developer email erik@jpox.org Low Vendor pom developer email geirm@apache.org Low Vendor pom developer email martin.zaun@Sun.COM Low Vendor pom developer email matthew@matthewadams.me Low Vendor pom developer email mbo.tech@spree.de Low Vendor pom developer email Michelle.Caisse@Sun.COM Low Vendor pom developer email mwa.tech@spree.de Low Vendor pom developer id brazil Medium Vendor pom developer id brianm Medium Vendor pom developer id clr Medium Vendor pom developer id ebengtson Medium Vendor pom developer id geirm Medium Vendor pom developer id madams Medium Vendor pom developer id mbo Medium Vendor pom developer id mcaisse Medium Vendor pom developer id mzaun Medium Vendor pom developer name Brian McCallister Medium Vendor pom developer name Craig Russell Medium Vendor pom developer name Erik Bengtson Medium Vendor pom developer name Geir Magnusson, Jr. Medium Vendor pom developer name Martin Zaun Medium Vendor pom developer name Matthew Adams Medium Vendor pom developer name Michael Bouschen Medium Vendor pom developer name Michael Watzek Medium Vendor pom developer name Michelle Caisse Medium Vendor pom developer org Apache.org Medium Vendor pom developer org JPOX Medium Vendor pom developer org Sun Microsystems, Inc. Medium Vendor pom developer org Tech@Spree Engineering GmbH Medium Vendor pom groupid javax.jdo Highest Vendor pom name JDO API High Vendor pom organization name Apache Software Foundation High Vendor pom organization url http://www.apache.org Medium Vendor pom url http://db.apache.org/jdo Highest Product file name jdo-api High Product jar package name javax Highest Product jar package name jdo Highest Product Manifest Bundle-Name Java Data Objects Medium Product Manifest bundle-symbolicname javax.jdo Medium Product Manifest Implementation-Title javax.jdo High Product Manifest specification-title Java Data Objects Medium Product manifest: javax/jdo Implementation-Title javax.jdo Medium Product manifest: javax/jdo Specification-Title Java Data Objects (JDO) API Medium Product pom artifactid jdo-api Highest Product pom developer email brianm@apache.org Low Product pom developer email Craig.Russell@Sun.COM Low Product pom developer email erik@jpox.org Low Product pom developer email geirm@apache.org Low Product pom developer email martin.zaun@Sun.COM Low Product pom developer email matthew@matthewadams.me Low Product pom developer email mbo.tech@spree.de Low Product pom developer email Michelle.Caisse@Sun.COM Low Product pom developer email mwa.tech@spree.de Low Product pom developer id brazil Low Product pom developer id brianm Low Product pom developer id clr Low Product pom developer id ebengtson Low Product pom developer id geirm Low Product pom developer id madams Low Product pom developer id mbo Low Product pom developer id mcaisse Low Product pom developer id mzaun Low Product pom developer name Brian McCallister Low Product pom developer name Craig Russell Low Product pom developer name Erik Bengtson Low Product pom developer name Geir Magnusson, Jr. Low Product pom developer name Martin Zaun Low Product pom developer name Matthew Adams Low Product pom developer name Michael Bouschen Low Product pom developer name Michael Watzek Low Product pom developer name Michelle Caisse Low Product pom developer org Apache.org Low Product pom developer org JPOX Low Product pom developer org Sun Microsystems, Inc. Low Product pom developer org Tech@Spree Engineering GmbH Low Product pom groupid javax.jdo Highest Product pom name JDO API High Product pom organization name Apache Software Foundation Low Product pom organization url http://www.apache.org Low Product pom url http://db.apache.org/jdo Medium Version file version 3.0.1 High Version Manifest Bundle-Version 3.0.1 High Version Manifest Implementation-Version 3.0.1 High Version manifest: javax/jdo Implementation-Version 3.0.1 Medium Version pom version 3.0.1 Highest
Description:
Jedis is a blazingly small and sane Redis java client. License:
MIT: http://github.com/redis/jedis/raw/master/LICENSE.txt File Path: /home/runner/.m2/repository/redis/clients/jedis/4.4.6/jedis-4.4.6.jar
MD5: b9a5c14de72096d2859ca111c744b73c
SHA1: cd8452cebda17bb445b9d666cd8cb741454348cd
SHA256: b387ccb0978ebce6196451887e960bda2c1804063e581737d2c4d91915c32ec7
Referenced In Project/Scope: shardingsphere-global-clock-tso-provider-redis:provided
jedis-4.4.6.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-global-clock-tso-provider-redis@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name jedis High Vendor jar package name clients Highest Vendor jar package name jedis Highest Vendor jar package name redis Highest Vendor Manifest automatic-module-name redis.clients.jedis Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname redis.clients.jedis Medium Vendor pom artifactid jedis Highest Vendor pom artifactid jedis Low Vendor pom groupid redis.clients Highest Vendor pom name Jedis High Vendor pom url redis/jedis Highest Product file name jedis High Product jar package name clients Highest Product jar package name jedis Highest Product jar package name redis Highest Product Manifest automatic-module-name redis.clients.jedis Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Jedis Medium Product Manifest bundle-symbolicname redis.clients.jedis Medium Product pom artifactid jedis Highest Product pom groupid redis.clients Highest Product pom name Jedis High Product pom url redis/jedis High Version file version 4.4.6 High Version Manifest Bundle-Version 4.4.6 High Version pom version 4.4.6 Highest
Description:
Jersey core common packages License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/org/glassfish/jersey/core/jersey-common/2.25.1/jersey-common-2.25.1.jar
MD5: d1f25f421cafb38efb49e2fef0799339
SHA1: 2438ce68d4907046095ab54aa83a6092951b4bbb
SHA256: 4df653fc69d5feec7ad1928018f964e12a7513bcea7b5e8b1aa4b1f5a815815f
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jersey-common-2.25.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jersey-common High Vendor jar package name glassfish Highest Vendor jar package name jersey Highest Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor Manifest bundle-symbolicname org.glassfish.jersey.core.jersey-common Medium Vendor pom artifactid jersey-common Highest Vendor pom artifactid jersey-common Low Vendor pom groupid org.glassfish.jersey.core Highest Vendor pom name jersey-core-common High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.glassfish.jersey Medium Product file name jersey-common High Product jar package name glassfish Highest Product jar package name jersey Highest Product Manifest bundle-docurl http://www.oracle.com/ Low Product Manifest Bundle-Name jersey-core-common Medium Product Manifest bundle-symbolicname org.glassfish.jersey.core.jersey-common Medium Product pom artifactid jersey-common Highest Product pom groupid org.glassfish.jersey.core Highest Product pom name jersey-core-common High Product pom parent-artifactid project Medium Product pom parent-groupid org.glassfish.jersey Medium Version file version 2.25.1 High Version Manifest Bundle-Version 2.25.1 High Version pom version 2.25.1 Highest
CVE-2021-28168 (OSSINDEX)suppress
Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are viewable by all other users locally on the system. As such, if the contents written is security sensitive, it can be disclosed to other local users. CWE-378 Creation of Temporary File With Insecure Permissions
CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.glassfish.jersey.core:jersey-common:2.25.1:*:*:*:*:*:*:* Description:
Jersey is the open source (under dual CDDL+GPL license) JAX-RS (JSR 311) production quality Reference Implementation for building RESTful Web services. License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html, http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/com/sun/jersey/jersey-server/1.19/jersey-server-1.19.jar
MD5: 20d340d5e608d4b2d3701d6b411a593b
SHA1: ee2ff839a65097eb12004edd909bcb4a97a2832c
SHA256: 433248a5c9990a59f8f442f10a8090ef25dadfe1a0d492efd4ce1e35b24d3e1c
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jersey-server-1.19.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jersey-server High Vendor jar package name jersey Highest Vendor jar package name server Highest Vendor jar package name sun Highest Vendor jar (hint) package name oracle Highest Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor Manifest bundle-symbolicname com.sun.jersey.jersey-server Medium Vendor Manifest Implementation-Vendor Oracle Corporation High Vendor Manifest Implementation-Vendor-Id com.sun.jersey Medium Vendor pom artifactid jersey-server Highest Vendor pom artifactid jersey-server Low Vendor pom groupid com.sun.jersey Highest Vendor pom name jersey-server High Vendor pom parent-artifactid jersey-project Low Product file name jersey-server High Product jar package name jersey Highest Product jar package name server Highest Product jar package name sun Highest Product Manifest bundle-docurl http://www.oracle.com/ Low Product Manifest Bundle-Name jersey-server Medium Product Manifest bundle-symbolicname com.sun.jersey.jersey-server Medium Product Manifest Implementation-Title jersey-server High Product pom artifactid jersey-server Highest Product pom groupid com.sun.jersey Highest Product pom name jersey-server High Product pom parent-artifactid jersey-project Medium Version file version 1.19 High Version Manifest Implementation-Version 1.19 High Version pom version 1.19 Highest
Related Dependencies jersey-client-1.19.jarFile Path: /home/runner/.m2/repository/com/sun/jersey/jersey-client/1.19/jersey-client-1.19.jar MD5: e3f867e0f8e86c0c6dae648f469ebe35 SHA1: 6836ee36dba2b3ac1d0ff4733129fba8aba7f963 SHA256: 591118924e4ecad37b25d2e955ae9531f4f7752aed587f99c6ccc98e03aaae5e pkg:maven/com.sun.jersey/jersey-client@1.19 jersey-core-1.19.jarFile Path: /home/runner/.m2/repository/com/sun/jersey/jersey-core/1.19/jersey-core-1.19.jar MD5: cdb4aea66737c70300be021a8ea50986 SHA1: 9a0619e2c514a79b610f17cadaae619c0a08d6a6 SHA256: 5d1841b925fad033c836d911573457c96608cdd99c30c084f61b091aff8aa698 pkg:maven/com.sun.jersey/jersey-core@1.19 jersey-guice-1.19.jarFile Path: /home/runner/.m2/repository/com/sun/jersey/contribs/jersey-guice/1.19/jersey-guice-1.19.jar MD5: 3e3958a0d7012156d8b4f0ed8306898c SHA1: 57106fa1b02f7d7fbca88adf2caa0d51f00b7799 SHA256: fc9f5e78c3d41992f5a33ae8cb74c3a754306c33a4e47e14bef16fde1084f5ef pkg:maven/com.sun.jersey.contribs/jersey-guice@1.19 Description:
Jersey core server implementation License:
http://glassfish.java.net/public/CDDL+GPL_1_1.html File Path: /home/runner/.m2/repository/org/glassfish/jersey/core/jersey-server/2.25.1/jersey-server-2.25.1.jar
MD5: 92dad916eab7a19c5398838a78ee9cab
SHA1: 276e2ee0fd1cdabf99357fce560c5baab675b1a2
SHA256: 4b9cdae8eae88b75762614b9a458f5aac47cf6486fe408206fc64e38b80469ae
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jersey-server-2.25.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jersey-server High Vendor jar package name glassfish Highest Vendor jar package name jersey Highest Vendor jar package name org Highest Vendor jar package name server Highest Vendor Manifest bundle-docurl http://www.oracle.com/ Low Vendor Manifest bundle-symbolicname org.glassfish.jersey.core.jersey-server Medium Vendor pom artifactid jersey-server Highest Vendor pom artifactid jersey-server Low Vendor pom groupid org.glassfish.jersey.core Highest Vendor pom name jersey-core-server High Vendor pom parent-artifactid project Low Vendor pom parent-groupid org.glassfish.jersey Medium Product file name jersey-server High Product jar package name glassfish Highest Product jar package name jersey Highest Product jar package name org Highest Product jar package name server Highest Product Manifest bundle-docurl http://www.oracle.com/ Low Product Manifest Bundle-Name jersey-core-server Medium Product Manifest bundle-symbolicname org.glassfish.jersey.core.jersey-server Medium Product pom artifactid jersey-server Highest Product pom groupid org.glassfish.jersey.core Highest Product pom name jersey-core-server High Product pom parent-artifactid project Medium Product pom parent-groupid org.glassfish.jersey Medium Version file version 2.25.1 High Version Manifest Bundle-Version 2.25.1 High Version pom version 2.25.1 Highest
Related Dependencies jersey-client-2.25.1.jarFile Path: /home/runner/.m2/repository/org/glassfish/jersey/core/jersey-client/2.25.1/jersey-client-2.25.1.jar MD5: cbc88e55529984d664eb6ef1b65b3684 SHA1: 4d563b1f93352ee9fad597e9e1daf2c6159993c6 SHA256: 10671e430dc7c841eb0bc54c9f3e265dbb60e9f85efaad71d1e39807057e405c pkg:maven/org.glassfish.jersey.core/jersey-client@2.25.1 jersey-container-servlet-core-2.25.1.jar jersey-guava-2.25.1.jarFile Path: /home/runner/.m2/repository/org/glassfish/jersey/bundles/repackaged/jersey-guava/2.25.1/jersey-guava-2.25.1.jar MD5: 08dc8642c4e990b054882cb4f422f88b SHA1: a2bb4f8208e134cf2cf71dfb8824e42942f7bd06 SHA256: 8a88a8ebae65cb4d77830b40f681bf742b55ec62e7a44cf91b8577a9396b9f81 pkg:maven/org.glassfish.jersey.bundles.repackaged/jersey-guava@2.25.1 jersey-media-jaxb-2.25.1.jarFile Path: /home/runner/.m2/repository/org/glassfish/jersey/media/jersey-media-jaxb/2.25.1/jersey-media-jaxb-2.25.1.jar MD5: 43c2fe9a2848343cb562f855b06b7047 SHA1: 0d7da0beeed5614a3bfd882662faec602699e24b SHA256: 05526bed0ffc07c2cea6b399f4e61ae3c99e44021e28a4af926ed1d867ba3fbe pkg:maven/org.glassfish.jersey.media/jersey-media-jaxb@2.25.1 Description:
jetcd-core License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/etcd/jetcd-core/0.7.7/jetcd-core-0.7.7.jar
MD5: 5b375c26de08ddbf644ed23c75653772
SHA1: 248af0e39b2f697edd36db5d16c375cd23740bb9
SHA256: 4e7b9f44e51ba6f8adb467a8bbc9e2a4ab508652d3f8c746701f63a290942d18
Referenced In Projects/Scopes: shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-cluster-mode-repository-etcd:compile shardingsphere-jdbc-distribution:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile jetcd-core-0.7.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jetcd-core High Vendor jar package name etcd Highest Vendor jar package name etcd Low Vendor jar package name io Highest Vendor jar package name io Low Vendor jar package name jetcd Highest Vendor jar package name jetcd Low Vendor pom artifactid jetcd-core Highest Vendor pom artifactid jetcd-core Low Vendor pom developer id lburgazzoli Medium Vendor pom developer name Anthony Romano Medium Vendor pom developer name Fanmin Shi Medium Vendor pom developer name Luca Burgazzoli Medium Vendor pom developer name Xiang Li Medium Vendor pom developer org CoreOS Medium Vendor pom developer org Red Hat Medium Vendor pom developer org URL http://coreos.com Medium Vendor pom developer org URL http://redhat.com Medium Vendor pom groupid io.etcd Highest Vendor pom name jetcd-core High Vendor pom url etcd-io/jetcd Highest Product file name jetcd-core High Product jar package name etcd Highest Product jar package name etcd Low Product jar package name io Highest Product jar package name jetcd Highest Product jar package name jetcd Low Product pom artifactid jetcd-core Highest Product pom developer id lburgazzoli Low Product pom developer name Anthony Romano Low Product pom developer name Fanmin Shi Low Product pom developer name Luca Burgazzoli Low Product pom developer name Xiang Li Low Product pom developer org CoreOS Low Product pom developer org Red Hat Low Product pom developer org URL http://coreos.com Low Product pom developer org URL http://redhat.com Low Product pom groupid io.etcd Highest Product pom name jetcd-core High Product pom url etcd-io/jetcd High Version file version 0.7.7 High Version pom version 0.7.7 Highest
Related Dependencies jetcd-api-0.7.7.jarFile Path: /home/runner/.m2/repository/io/etcd/jetcd-api/0.7.7/jetcd-api-0.7.7.jar MD5: e79b259822852d36e21c3d1b2caf0b06 SHA1: 93bbdfe6ab3f29af0b3a33fa32d58ba7d7c0070a SHA256: e6e57b9176a4ee4f2b495f0aafb9f73c3cb2c9a40cc5fb5aca4570e16f4ff931 pkg:maven/io.etcd/jetcd-api@0.7.7 jetcd-common-0.7.7.jarFile Path: /home/runner/.m2/repository/io/etcd/jetcd-common/0.7.7/jetcd-common-0.7.7.jar MD5: 89986d8d990242cd979b986ccaffb8e6 SHA1: a9aecaf46d2d202bab03d95e453eef8fa891cf0b SHA256: 3db56d0fdd51b5f5ed5c8aeda10b146c22beb470dab2afdaa9a064f67cb69092 pkg:maven/io.etcd/jetcd-common@0.7.7 CVE-2020-15113 suppress
In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients) with restricted access permissions (700) by using the os.MkdirAll. This function does not perform any permission checks when a given directory path exists already. A possible workaround is to ensure the directories have the desired permission (700). CWE-281 Improper Preservation of Permissions
CVSSv2:
Base Score: LOW (3.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: HIGH (7.1) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-15106 suppress
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL. CWE-20 Improper Input Validation, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-15112 suppress
In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry. CWE-129 Improper Validation of Array Index, CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-32082 suppress
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names (not value) associated to a lease when `Keys` parameter is true, even a user doesn't have read permission to the keys. The impact is limited to a cluster which enables auth (RBAC). Versions 3.4.26 and 3.5.9 fix this issue. There are no known workarounds. NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
jetcd-grpc License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/etcd/jetcd-grpc/0.7.7/jetcd-grpc-0.7.7.jar
MD5: d50d8583e26bc2ce55b0966a0c774b73
SHA1: 0fa26f72729edb39b506efa96e119f953f59c5a3
SHA256: 4b6098f8e2c2fbfd6eadf45dc454113877a32091878c8a5602d53aaddcc20d0b
Referenced In Projects/Scopes: shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-cluster-mode-repository-etcd:compile shardingsphere-jdbc-distribution:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile jetcd-grpc-0.7.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/io.etcd/jetcd-core@0.7.7 pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jetcd-grpc High Vendor jar package name etcd Highest Vendor jar package name etcd Low Vendor jar package name io Highest Vendor jar package name io Low Vendor jar package name jetcd Highest Vendor jar package name jetcd Low Vendor pom artifactid jetcd-grpc Highest Vendor pom artifactid jetcd-grpc Low Vendor pom developer id lburgazzoli Medium Vendor pom developer name Anthony Romano Medium Vendor pom developer name Fanmin Shi Medium Vendor pom developer name Luca Burgazzoli Medium Vendor pom developer name Xiang Li Medium Vendor pom developer org CoreOS Medium Vendor pom developer org Red Hat Medium Vendor pom developer org URL http://coreos.com Medium Vendor pom developer org URL http://redhat.com Medium Vendor pom groupid io.etcd Highest Vendor pom name jetcd-grpc High Vendor pom url etcd-io/jetcd Highest Product file name jetcd-grpc High Product jar package name api Low Product jar package name etcd Highest Product jar package name etcd Low Product jar package name io Highest Product jar package name jetcd Highest Product jar package name jetcd Low Product pom artifactid jetcd-grpc Highest Product pom developer id lburgazzoli Low Product pom developer name Anthony Romano Low Product pom developer name Fanmin Shi Low Product pom developer name Luca Burgazzoli Low Product pom developer name Xiang Li Low Product pom developer org CoreOS Low Product pom developer org Red Hat Low Product pom developer org URL http://coreos.com Low Product pom developer org URL http://redhat.com Low Product pom groupid io.etcd Highest Product pom name jetcd-grpc High Product pom url etcd-io/jetcd High Version file version 0.7.7 High Version pom version 0.7.7 Highest
CVE-2017-7860 suppress
Google gRPC before 2017-02-22 has an out-of-bounds write caused by a heap-based buffer overflow related to the parse_unix function in core/ext/client_channel/parse_address.c. CWE-787 Out-of-bounds Write
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2017-7861 suppress
Google gRPC before 2017-02-22 has an out-of-bounds write related to the gpr_free function in core/lib/support/alloc.c. CWE-787 Out-of-bounds Write
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2017-8359 suppress
Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c. CWE-787 Out-of-bounds Write
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2017-9431 suppress
Google gRPC before 2017-04-05 has an out-of-bounds write caused by a heap-based buffer overflow related to core/lib/iomgr/error.c. CWE-787 Out-of-bounds Write
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2020-7768 suppress
The package grpc before 1.24.4; the package @grpc/grpc-js before 1.1.8 are vulnerable to Prototype Pollution via loadPackageDefinition. CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-33953 suppress
gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/ Three vectors were found that allow the following DOS attacks:
- Unbounded memory buffering in the HPACK parser
- Unbounded CPU consumption in the HPACK parser
The unbounded CPU consumption is down to a copy that occurred per-input-block in the parser, and because that could be unbounded due to the memory copy bug we end up with an O(n^2) parsing loop, with n selected by the client.
The unbounded memory buffering bugs:
- The header size limit check was behind the string reading code, so we needed to first buffer up to a 4 gigabyte string before rejecting it as longer than 8 or 16kb.
- HPACK varints have an encoding quirk whereby an infinite number of 0’s can be added at the start of an integer. gRPC’s hpack parser needed to read all of them before concluding a parse.
- gRPC’s metadata overflow check was performed per frame, so that the following sequence of frames could cause infinite buffering: HEADERS: containing a: 1 CONTINUATION: containing a: 2 CONTINUATION: containing a: 3 etc… CWE-789 Memory Allocation with Excessive Size Value, CWE-834 Excessive Iteration, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2020-15113 suppress
In etcd before versions 3.3.23 and 3.4.10, certain directory paths are created (etcd data directory and the directory path when provided to automatically generate self-signed certificates for TLS connections with clients) with restricted access permissions (700) by using the os.MkdirAll. This function does not perform any permission checks when a given directory path exists already. A possible workaround is to ensure the directories have the desired permission (700). CWE-281 Improper Preservation of Permissions
CVSSv2:
Base Score: LOW (3.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: HIGH (7.1) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-15106 suppress
In etcd before versions 3.3.23 and 3.4.10, a large slice causes panic in decodeRecord method. The size of a record is stored in the length field of a WAL file and no additional validation is done on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionally panic at the expense of any RAFT participant trying to decode the WAL. CWE-20 Improper Input Validation, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-15112 suppress
In etcd before versions 3.3.23 and 3.4.10, it is possible to have an entry index greater then the number of entries in the ReadAll method in wal/wal.go. This could cause issues when WAL entries are being read during consensus as an arbitrary etcd consensus participant could go down from a runtime panic when reading the entry. CWE-129 Improper Validation of Array Index, CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:N/A:P CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-32732 suppress
gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for `-bin` suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyond the commit in https://github.com/grpc/grpc/pull/32309 https://www.google.com/url
NVD-CWE-Other, CWE-440 Expected Behavior Violation
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2023-32082 suppress
etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names (not value) associated to a lease when `Keys` parameter is true, even a user doesn't have read permission to the keys. The impact is limited to a cluster which enables auth (RBAC). Versions 3.4.26 and 3.5.9 fix this issue. There are no known workarounds. NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
A StAX implementation for JSON. License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/org/codehaus/jettison/jettison/1.5.4/jettison-1.5.4.jar
MD5: f6c3eeb572f5830303059fec2812821f
SHA1: 174ca56c411b05aec323d8f53e66709c0d28b337
SHA256: fc3a68a7c17688ee50817340fef265d8d3f6c192c92bbee00d17f18a6d3dfeda
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jettison-1.5.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jettison High Vendor jar package name codehaus Highest Vendor jar package name jettison Highest Vendor jar package name json Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname org.codehaus.jettison.jettison Medium Vendor pom artifactid jettison Highest Vendor pom artifactid jettison Low Vendor pom developer name The Jettison Team Medium Vendor pom groupid org.codehaus.jettison Highest Vendor pom name Jettison High Vendor pom url jettison-json/jettison Highest Product file name jettison High Product jar package name codehaus Highest Product jar package name jettison Highest Product jar package name json Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name jettison Medium Product Manifest bundle-symbolicname org.codehaus.jettison.jettison Medium Product Manifest Implementation-Title Jettison High Product pom artifactid jettison Highest Product pom developer name The Jettison Team Low Product pom groupid org.codehaus.jettison Highest Product pom name Jettison High Product pom url jettison-json/jettison High Version file version 1.5.4 High Version Manifest Bundle-Version 1.5.4 High Version Manifest Implementation-Version 1.5.4 High Version pom version 1.5.4 Highest
Description:
Jetty module for Jetty :: IO Utility License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-io/9.3.20.v20170531/jetty-io-9.3.20.v20170531.jar
MD5: b295516e5fed7cc46742a96200bf288c
SHA1: 5b68e7761fcacefcf26ad9ab50943db65fda2c3d
SHA256: 3d85cc7c8b85f6ab251d0552b0df83c024bd191a48513a6e8c490ab78b8076aa
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jetty-io-9.3.20.v20170531.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jetty-io High Vendor jar package name eclipse Highest Vendor jar package name io Highest Vendor jar package name jetty Highest Vendor Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.io Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom artifactid jetty-io Highest Vendor pom artifactid jetty-io Low Vendor pom groupid org.eclipse.jetty Highest Vendor pom name Jetty :: IO Utility High Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product file name jetty-io High Product jar package name eclipse Highest Product jar package name io Highest Product jar package name jetty Highest Product Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest Bundle-Name Jetty :: IO Utility Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname org.eclipse.jetty.io Medium Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product Manifest url http://www.eclipse.org/jetty Low Product pom artifactid jetty-io Highest Product pom groupid org.eclipse.jetty Highest Product pom name Jetty :: IO Utility High Product pom parent-artifactid jetty-project Medium Product pom url http://www.eclipse.org/jetty Medium Version file version 9.3.20.v20170531 High Version Manifest Bundle-Version 9.3.20.v20170531 High Version Manifest Implementation-Version 9.3.20.v20170531 High Version pom version 9.3.20.v20170531 Highest
Related Dependencies jetty-annotations-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-annotations/9.3.20.v20170531/jetty-annotations-9.3.20.v20170531.jar MD5: 689aa771a8c76364305ba6ceb292b079 SHA1: 53876fc19d12a81ef3b362ff22f666dfa81f22e3 SHA256: 309cdd565968b21982706ddb28ced07de5042d9beea32740d1ad885ffb079e62 pkg:maven/org.eclipse.jetty/jetty-annotations@9.3.20.v20170531 jetty-jaas-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-jaas/9.3.20.v20170531/jetty-jaas-9.3.20.v20170531.jar MD5: 8a78eef1cf9273c36f61e67019c43bfc SHA1: 396d07c275b7c1e138fd50e8fa71a6f4c7832a96 SHA256: 1769c655a9850a503d8c7b43af87fcf3c4de681a951a99fce8e33dba67b05931 pkg:maven/org.eclipse.jetty/jetty-jaas@9.3.20.v20170531 jetty-jndi-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-jndi/9.3.20.v20170531/jetty-jndi-9.3.20.v20170531.jar MD5: 38e9a5c93ad31b49b139e1172b1ce8bd SHA1: 0c1e7dbf96d6fc49c5c02db28c6e7924e0e64378 SHA256: e7143cf140858d3a384c0918a814dea43b13ecaf8cc03fb8bfd255931bfb3aff pkg:maven/org.eclipse.jetty/jetty-jndi@9.3.20.v20170531 jetty-plus-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-plus/9.3.20.v20170531/jetty-plus-9.3.20.v20170531.jar MD5: d5992fdc052133da91cda93487bd36b4 SHA1: 986daac14b43331c0e93f115797849883f12a584 SHA256: 4fdb31d99f72556468d18ff7baf7f268a67a0770bec67f87c474d87856e31f35 pkg:maven/org.eclipse.jetty/jetty-plus@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar MD5: 820df8c6aa310986a96c6f883cf14e91 SHA1: 56d1d067b4e42a6c603ece754534f9a65211924a SHA256: d7baeb1ba3c75db62401fb629015d69024bbb11083c7b3e89cb94ce516df01c9 pkg:maven/org.eclipse.jetty/jetty-runner@9.3.20.v20170531 jetty-security-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-security/9.3.20.v20170531/jetty-security-9.3.20.v20170531.jar MD5: 71ce7271d5f56f87302f4c56a9cd82b1 SHA1: 9e2ded957c05f447a0611fa64ca4ab5f7cc5aa65 SHA256: ef370740c45137aa3e6b6217dc03358d16566e5e6c00b0e1cb3ad777491846c3 pkg:maven/org.eclipse.jetty/jetty-security@9.3.20.v20170531 jetty-util-ajax-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-util-ajax/9.3.20.v20170531/jetty-util-ajax-9.3.20.v20170531.jar MD5: 47c75eaa379896f71c1d8178b0df4979 SHA1: 3e141a43163196243c438a2c44b81a3737e8e033 SHA256: 397b4be6c0d171996bbbd6782fe7aabba2199849a8595ad63fc00a1b549b898b pkg:maven/org.eclipse.jetty/jetty-util-ajax@9.3.20.v20170531 CVE-2017-7657 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), CWE-190 Integer Overflow or Wraparound
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7656 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12545 suppress
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings. CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28165 suppress
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. CWE-400 Uncontrolled Resource Consumption, CWE-755 Improper Handling of Exceptional Conditions, CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVSSv2:
Base Score: HIGH (7.8) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:C CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2048 suppress
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. CWE-664 Improper Control of a Resource Through its Lifetime, NVD-CWE-Other, CWE-410 Insufficient Resource Pool
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36478 suppress
Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to
exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295
will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds. CWE-400 Uncontrolled Resource Consumption, CWE-190 Integer Overflow or Wraparound
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2020-27216 suppress
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (4.4) Vector: /AV:L/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.0/RC:R/MAV:A References:
emo@eclipse.org - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY emo@eclipse.org - EXPLOIT,PATCH,VENDOR_ADVISORY emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY emo@eclipse.org - NOT_APPLICABLE,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2019-10241 suppress
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12536 suppress
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system. CWE-209 Generation of Error Message Containing Sensitive Information, NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-10247 suppress
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context. CWE-213 Exposure of Sensitive Information Due to Incompatible Policies, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28169 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application. NVD-CWE-Other, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26048 suppress
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory). CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26049 suppress
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue. NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-40167 suppress
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario. CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36479 suppress
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.
CWE-149 Improper Neutralization of Quoting Syntax
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-34428 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in. CWE-613 Insufficient Session Expiration
CVSSv2:
Base Score: LOW (3.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: LOW (3.5) Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:0.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2047 suppress
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:P/A:N CVSSv3:
Base Score: LOW (2.7) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:1.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
The core jetty server artifact. File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-server/pom.xmlMD5: 3f61936bbbcf772b00a4e294151aeb34SHA1: fe2ce3acefe092a841f3afdc3911eb90c130a8e4SHA256: 6d540e00864d3b8c289829676493dc3378a9de864508e1d44f00a930d5ce8d31Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid jetty-server Low Vendor pom groupid org.eclipse.jetty Highest Vendor pom name Jetty :: Server Core High Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product pom artifactid jetty-server Highest Product pom groupid org.eclipse.jetty Highest Product pom name Jetty :: Server Core High Product pom parent-artifactid jetty-project Medium Product pom url http://www.eclipse.org/jetty Medium Version pom version 9.3.20.v20170531 Highest
Related Dependencies jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty.websocket:websocket-client:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty.websocket/websocket-client/pom.xml MD5: 3e591e4f4bedb7bcb74bad3cd7d5d126 SHA1: 277b4085c4cfef8cb3493b5b5b68378697629999 SHA256: b8cffcf72efe4b3bcab5f46dd7f017af588d961d781606a418f52396feb2b626 pkg:maven/org.eclipse.jetty.websocket/websocket-client@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty.websocket:websocket-common:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty.websocket/websocket-common/pom.xml MD5: ddda715018900058cc8f7a5fc18bdc39 SHA1: 5eb1ee77e8495de4ae316e97ddf4df2041ee9450 SHA256: d6d84358e879a9c447eb3e377219d11da07f5029eb3d3fcaea303fe98b60f0e0 pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty.websocket:websocket-server:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty.websocket/websocket-server/pom.xml MD5: 3fb29fb0e9c3550ba06108b7f06e776d SHA1: 17ad4f79f3b107108e5ffac700a7fd7b1eb841aa SHA256: d89c6327a0c573d4c79b5eae7adea236c43bca0e626155c5988a951b2847b3de pkg:maven/org.eclipse.jetty.websocket/websocket-server@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty.websocket:websocket-servlet:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty.websocket/websocket-servlet/pom.xml MD5: 851975d02855837e172daa6c22464dc2 SHA1: ec9839188382eed5f6023fe6f6a29174fc051769 SHA256: 00bf65a47421345e8d99c5ff37eca532bf08a56631a7bb2706a93a692c0a4d2d pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:apache-jsp:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/apache-jsp/pom.xml MD5: 844200fae371fc1b2d67be3bf32411e3 SHA1: 6abb9ac35d65432a4d5a83e5df06a02967e89fbc SHA256: b7969076fe22fd998d43f4313576d8e5beb27989c4c5dedd7a077c59ad866908 pkg:maven/org.eclipse.jetty/apache-jsp@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-annotations:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-annotations/pom.xml MD5: 17c4f2ea833c495d1d33402b92f01b11 SHA1: c024a6ba60541b8ffd886de4855ffde3944bb848 SHA256: 78aae1efda7c002704801ffc67245156b8a4006c83d444e4cefdfcdf4a45387a pkg:maven/org.eclipse.jetty/jetty-annotations@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-http:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-http/pom.xml MD5: 1cee98ac1304074e5772c24d06c0c67b SHA1: a84f1a5d2c0e0283c61eb6da8e4dde2385711fcf SHA256: 5fb78555d5b1435094ed82f199fa4edfb938de37f2671fd8bb5e25d5ab559eb2 pkg:maven/org.eclipse.jetty/jetty-http@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-io:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-io/pom.xml MD5: 29fa7d7ac496a2402edd0e5c6b2497ab SHA1: b31b03cb2709f241d039798bb5bdd573592efc03 SHA256: 326b2035db6be8a2bdb1c00324a04ea2141130b91263e0b6687ec5d431b72ae7 pkg:maven/org.eclipse.jetty/jetty-io@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-jaas:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-jaas/pom.xml MD5: df453065e0c0d0a4ca6e99098ba3d3a2 SHA1: bec0e9395d60bf781ada0decf9bc628e8dec714e SHA256: 8623cbca5586b6093b0e9c017c0d31a1213e94569111a25da09f42c82def7ed1 pkg:maven/org.eclipse.jetty/jetty-jaas@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-jndi:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-jndi/pom.xml MD5: 2dc65ca82b2cc00b25915376fe4840d7 SHA1: 33079272c701259eb0f3402323d0316e83b8f964 SHA256: 74e39e5012f148b752b675ad18f31d798822b0c9b51a9b4c558d52d5bafb74ed pkg:maven/org.eclipse.jetty/jetty-jndi@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-plus:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-plus/pom.xml MD5: 501d37406fb4444b78e1945612606185 SHA1: c5315dd6623486dbf83812026e9f666d80df744c SHA256: 55b27362a61e34ac6611d32a0b947b7df8e2b3e6a2630925602e9e339bc759eb pkg:maven/org.eclipse.jetty/jetty-plus@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-security:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-security/pom.xml MD5: a7ddd1a08a6e9126a7ebb50175a95265 SHA1: ddccf125683855e874fd7dcd859d0b163036ed1f SHA256: 7db5391f6462c29c7a3942b25deedf52b053e405ba9634fc4628a4b6b6b0deb6 pkg:maven/org.eclipse.jetty/jetty-security@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-servlet:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-servlet/pom.xml MD5: c0d91c889839a4cd3e200891733a222b SHA1: b901ccbc6ff7ec8eaa3b2d4d71f69b3680ea4c48 SHA256: 772693fd61fcc7625c62d9201a419dbced8358dd3cb6881c309602b3cd14f302 pkg:maven/org.eclipse.jetty/jetty-servlet@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-webapp:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-webapp/pom.xml MD5: 4a513ec25b5150fc03fb6dfddf8863f2 SHA1: d984ca680407ccbd4ec228fe4a9ad96a0f6310ad SHA256: 80c59591b42609d4bee8ea69ef2925c20ccb76668632f3f93c7c9ca259bdd83c pkg:maven/org.eclipse.jetty/jetty-webapp@9.3.20.v20170531 jetty-runner-9.3.20.v20170531.jar (shaded: org.eclipse.jetty:jetty-xml:9.3.20.v20170531)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-xml/pom.xml MD5: 7b8844df17261ed098e7372efbbef7c2 SHA1: 3689fa570431ad881c53d2c183755c5919e2784f SHA256: 6c36b90bbbff280f52d442fbda6b3f33210b3f756186335685b3b6f226c03f08 pkg:maven/org.eclipse.jetty/jetty-xml@9.3.20.v20170531 CVE-2017-7657 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), CWE-190 Integer Overflow or Wraparound
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7656 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12545 suppress
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings. CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28165 suppress
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. CWE-400 Uncontrolled Resource Consumption, CWE-755 Improper Handling of Exceptional Conditions, CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVSSv2:
Base Score: HIGH (7.8) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:C CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2048 suppress
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. CWE-664 Improper Control of a Resource Through its Lifetime, NVD-CWE-Other, CWE-410 Insufficient Resource Pool
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36478 suppress
Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to
exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295
will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds. CWE-400 Uncontrolled Resource Consumption, CWE-190 Integer Overflow or Wraparound
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2020-27216 suppress
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (4.4) Vector: /AV:L/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.0/RC:R/MAV:A References:
OSSINDEX - [CVE-2020-27216] CWE-378: Creation of Temporary File With Insecure Permissions OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27216 OSSIndex - https://bugs.eclipse.org/bugs/show_bug.cgi?id=567921 OSSIndex - https://github.com/eclipse/jetty.project/issues/5451 OSSIndex - https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6 emo@eclipse.org - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY emo@eclipse.org - EXPLOIT,PATCH,VENDOR_ADVISORY emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY emo@eclipse.org - NOT_APPLICABLE,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2019-10241 suppress
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12536 suppress
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system. CWE-209 Generation of Error Message Containing Sensitive Information, NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-10247 suppress
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context. CWE-213 Exposure of Sensitive Information Due to Incompatible Policies, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28169 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application. NVD-CWE-Other, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26048 suppress
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory). CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26049 suppress
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue. NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-40167 suppress
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario. CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36479 suppress
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.
CWE-149 Improper Neutralization of Quoting Syntax
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-34428 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in. CWE-613 Insufficient Session Expiration
CVSSv2:
Base Score: LOW (3.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: LOW (3.5) Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:0.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2047 suppress
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:P/A:N CVSSv3:
Base Score: LOW (2.7) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:1.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Utility classes for Jetty File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.eclipse.jetty/jetty-util/pom.xmlMD5: d2278c8c65e44c93522eb8e688ab452bSHA1: e618a6cb5c2933c6dbf9d8acd48654a4eaaf34deSHA256: f0cb48f4d6c596e3c6d772e7ade2c3b3a1cd592b8ae94911531c4aaf887674feReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid jetty-util Low Vendor pom groupid org.eclipse.jetty Highest Vendor pom name Jetty :: Utilities High Vendor pom parent-artifactid jetty-project Low Vendor pom url http://www.eclipse.org/jetty Highest Product pom artifactid jetty-util Highest Product pom groupid org.eclipse.jetty Highest Product pom name Jetty :: Utilities High Product pom parent-artifactid jetty-project Medium Product pom url http://www.eclipse.org/jetty Medium Version pom version 9.3.20.v20170531 Highest
CVE-2017-7657 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), CWE-190 Integer Overflow or Wraparound
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7656 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12545 suppress
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings. CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28165 suppress
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. CWE-400 Uncontrolled Resource Consumption, CWE-755 Improper Handling of Exceptional Conditions, CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVSSv2:
Base Score: HIGH (7.8) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:C CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2048 suppress
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. CWE-664 Improper Control of a Resource Through its Lifetime, NVD-CWE-Other, CWE-410 Insufficient Resource Pool
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36478 suppress
Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to
exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295
will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds. CWE-400 Uncontrolled Resource Consumption, CWE-190 Integer Overflow or Wraparound
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2020-27216 suppress
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (4.4) Vector: /AV:L/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.0/RC:R/MAV:A References:
OSSINDEX - [CVE-2020-27216] CWE-378: Creation of Temporary File With Insecure Permissions OSSIndex - http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-27216 OSSIndex - https://bugs.eclipse.org/bugs/show_bug.cgi?id=567921 OSSIndex - https://github.com/eclipse/jetty.project/issues/5451 OSSIndex - https://github.com/eclipse/jetty.project/security/advisories/GHSA-g3wg-6mcf-8jj6 emo@eclipse.org - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY emo@eclipse.org - EXPLOIT,PATCH,VENDOR_ADVISORY emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY emo@eclipse.org - NOT_APPLICABLE,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2019-10241 suppress
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-10246 (OSSINDEX)suppress
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information reveal is restricted to only the content in the configured base resource directories. CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.300000190734863) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.eclipse.jetty:jetty-util:9.3.20.v20170531:*:*:*:*:*:*:* CVE-2018-12536 suppress
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system. CWE-209 Generation of Error Message Containing Sensitive Information, NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-10247 suppress
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context. CWE-213 Exposure of Sensitive Information Due to Incompatible Policies, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28169 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application. NVD-CWE-Other, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26048 suppress
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory). CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26049 suppress
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue. NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-40167 suppress
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario. CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36479 suppress
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.
CWE-149 Improper Neutralization of Quoting Syntax
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-34428 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in. CWE-613 Insufficient Session Expiration
CVSSv2:
Base Score: LOW (3.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: LOW (3.5) Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:0.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2047 suppress
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:P/A:N CVSSv3:
Base Score: LOW (2.7) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:1.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.mortbay.jasper/apache-jsp/pom.xmlMD5: 5420ee1f4edb3c887b0dfe00a2da9c4eSHA1: eed89be5930837ecab794e0b7dd743af9105c4cbSHA256: 9f6264036660ff19c5f09b6a13c699427825640d51e4d47724c248378a36aff5Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor pom artifactid apache-jsp Low Vendor pom groupid org.mortbay.jasper Highest Vendor pom name MortBay :: Apache Jasper :: JSP Implementation High Vendor pom parent-artifactid jasper-jsp Low Product pom artifactid apache-jsp Highest Product pom groupid org.mortbay.jasper Highest Product pom name MortBay :: Apache Jasper :: JSP Implementation High Product pom parent-artifactid jasper-jsp Medium Version pom version 8.0.33 Highest
Description:
Administrative parent pom for Jetty modules License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/jetty/toolchain/jetty-schemas/3.1/jetty-schemas-3.1.jar
MD5: 72724fe34a75d0f4ab21a3869734faee
SHA1: 98bb827bdf254fd353bab0c53324c0848076b42c
SHA256: b58ddbe2025d80ada24409ae6e66fb2e56226538fa847d59c5df0ca7432b554e
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jetty-schemas-3.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jetty-schemas High Vendor Manifest bundle-docurl http://www.mortbay.com Low Vendor Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.schemas;singleton:=true Medium Vendor pom artifactid jetty-schemas Highest Vendor pom artifactid jetty-schemas Low Vendor pom groupid org.eclipse.jetty.toolchain Highest Vendor pom name Jetty :: Schemas High Vendor pom parent-artifactid jetty-toolchain Low Product file name jetty-schemas High Product Manifest bundle-docurl http://www.mortbay.com Low Product Manifest Bundle-Name Jetty Servlet Schemas Medium Product Manifest bundle-requiredexecutionenvironment J2SE-1.5 Low Product Manifest bundle-symbolicname org.eclipse.jetty.schemas;singleton:=true Medium Product pom artifactid jetty-schemas Highest Product pom groupid org.eclipse.jetty.toolchain Highest Product pom name Jetty :: Schemas High Product pom parent-artifactid jetty-toolchain Medium Version file version 3.1 High Version pom parent-version 3.1 Low Version pom version 3.1 Highest
Description:
Date and time library to replace JDK date handling License:
Apache 2: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/joda-time/joda-time/2.9.9/joda-time-2.9.9.jar
MD5: eca438c8cc2b1de38e28d884b7f15dbc
SHA1: f7b520c458572890807d143670c9b24f4de90897
SHA256: b049a43c1057942e6acfbece008e4949b2e35d1658d0c8e06f4485397e2fa4e7
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
joda-time-2.9.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name joda-time High Vendor jar package name joda Highest Vendor jar package name time Highest Vendor Manifest bundle-docurl http://www.joda.org/joda-time/ Low Vendor Manifest bundle-symbolicname joda-time Medium Vendor Manifest extension-name joda-time Medium Vendor Manifest implementation-url http://www.joda.org/joda-time/ Low Vendor Manifest Implementation-Vendor Joda.org High Vendor Manifest Implementation-Vendor-Id org.joda Medium Vendor Manifest specification-vendor Joda.org Low Vendor pom artifactid joda-time Highest Vendor pom artifactid joda-time Low Vendor pom developer id broneill Medium Vendor pom developer id jodastephen Medium Vendor pom developer name Brian S O'Neill Medium Vendor pom developer name Stephen Colebourne Medium Vendor pom groupid joda-time Highest Vendor pom name Joda-Time High Vendor pom organization name Joda.org High Vendor pom organization url http://www.joda.org Medium Vendor pom url http://www.joda.org/joda-time/ Highest Product file name joda-time High Product jar package name joda Highest Product jar package name time Highest Product Manifest bundle-docurl http://www.joda.org/joda-time/ Low Product Manifest Bundle-Name Joda-Time Medium Product Manifest bundle-symbolicname joda-time Medium Product Manifest extension-name joda-time Medium Product Manifest Implementation-Title org.joda.time High Product Manifest implementation-url http://www.joda.org/joda-time/ Low Product Manifest specification-title Joda-Time Medium Product pom artifactid joda-time Highest Product pom developer id broneill Low Product pom developer id jodastephen Low Product pom developer name Brian S O'Neill Low Product pom developer name Stephen Colebourne Low Product pom groupid joda-time Highest Product pom name Joda-Time High Product pom organization name Joda.org Low Product pom organization url http://www.joda.org Low Product pom url http://www.joda.org/joda-time/ Medium Version file version 2.9.9 High Version Manifest Bundle-Version 2.9.9 High Version Manifest Implementation-Version 2.9.9 High Version pom version 2.9.9 Highest
Description:
Jpam is a Java-PAM bridge. PAM, or Pluggable Authentication Modules, is a standard security architecture used on Linux, Solaris, HP-UX, Mac OS X and other Unix systems.
License:
The Apache Software License, Version 2.0: http://jpam.sourceforge.net/LICENSE.txt File Path: /home/runner/.m2/repository/net/sf/jpam/jpam/1.1/jpam-1.1.jar
MD5: f0459c2d72cc35f947bac690729a32a2
SHA1: cb3d91c2dfda767518a371dbb02edfd6a4aa0600
SHA256: 3db38287ef038b01b7e73f2c62c3e7107af24a6b0cf95fda904b4330edcf8b28
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jpam-1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jpam High Vendor jar package name jpam Highest Vendor jar package name jpam Low Vendor jar package name net Highest Vendor jar package name net Low Vendor jar package name sf Highest Vendor jar package name sf Low Vendor pom artifactid jpam Highest Vendor pom artifactid jpam Low Vendor pom developer email gregluck at users.sourceforge.net Low Vendor pom developer id gregluck Medium Vendor pom developer name Greg Luck Medium Vendor pom groupid net.sf.jpam Highest Vendor pom name JPam High Vendor pom url http://jpam.sf.net Highest Product file name jpam High Product jar package name jpam Highest Product jar package name jpam Low Product jar package name net Highest Product jar package name sf Highest Product jar package name sf Low Product pom artifactid jpam Highest Product pom developer email gregluck at users.sourceforge.net Low Product pom developer id gregluck Low Product pom developer name Greg Luck Low Product pom groupid net.sf.jpam Highest Product pom name JPam High Product pom url http://jpam.sf.net Medium Version file version 1.1 High Version pom version 1.1 Highest
Description:
A clean-room Apache-licensed implementation of simple JSON processing License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/tdunning/json/1.8/json-1.8.jar
MD5: a89b66cf37063d0ee4f401193eb0ca2d
SHA1: fa57d5adf557b226738cd42e6c093dd0a76c5fd4
SHA256: e0b487de3ccd3d1c288976677835e49880799c35507059039a18fa4ae1e7c59a
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
json-1.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name json High Vendor jar package name json Highest Vendor jar package name json Low Vendor pom artifactid json Highest Vendor pom artifactid json Low Vendor pom developer email ted.dunning@gmail.com Low Vendor pom developer id tdunning Medium Vendor pom developer name Ted Medium Vendor pom groupid com.tdunning Highest Vendor pom name Open JSON High Vendor pom url tdunning/open-json Highest Product file name json High Product jar package name json Highest Product pom artifactid json Highest Product pom developer email ted.dunning@gmail.com Low Product pom developer id tdunning Low Product pom developer name Ted Low Product pom groupid com.tdunning Highest Product pom name Open JSON High Product pom url tdunning/open-json High Version file version 1.8 High Version pom version 1.8 Highest
Description:
JSON is a light-weight, language independent, data interchange format.
See http://www.JSON.org/
The files in this package implement JSON encoders/decoders in Java.
It also includes the capability to convert between JSON and XML, HTTP
headers, Cookies, and CDL.
This is a reference implementation. There are a large number of JSON packages
in Java. Perhaps someday the Java community will standardize on one. Until
then, choose carefully.
License:
Public Domain: https://github.com/stleary/JSON-java/blob/master/LICENSE File Path: /home/runner/.m2/repository/org/json/json/20231013/json-20231013.jar
MD5: 1a0702c57783ce9e948252c34644f328
SHA1: e22e0c040fe16f04ffdb85d851d77b07fc05ea52
SHA256: 0f18192df289114e17aa1a0d0a7f8372cc9f5c7e4f7e39adcf8906fe714fa7d3
Referenced In Project/Scope: shardingsphere-global-clock-tso-provider-redis:provided
json-20231013.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/redis.clients/jedis@4.4.6
Evidence Type Source Name Value Confidence Vendor file name json-20231013 High Vendor jar package name cdl Highest Vendor jar package name http Highest Vendor jar package name json Highest Vendor jar package name xml Highest Vendor Manifest automatic-module-name org.json Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname json Medium Vendor pom artifactid json Highest Vendor pom artifactid json Low Vendor pom developer email douglas@crockford.com Low Vendor pom developer name Douglas Crockford Medium Vendor pom groupid org.json Highest Vendor pom name JSON in Java High Vendor pom url douglascrockford/JSON-java Highest Product file name json-20231013 High Product jar package name cdl Highest Product jar package name http Highest Product jar package name json Highest Product jar package name xml Highest Product Manifest automatic-module-name org.json Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name JSON in Java Medium Product Manifest bundle-symbolicname json Medium Product pom artifactid json Highest Product pom developer email douglas@crockford.com Low Product pom developer name Douglas Crockford Low Product pom groupid org.json Highest Product pom name JSON in Java High Product pom url douglascrockford/JSON-java High Version file version 20231013 Medium Version pom version 20231013 Highest
Description:
JSON (JavaScript Object Notation) is a lightweight data-interchange format. It is easy for humans to read and write. It is easy for machines to parse and generate. It is based on a subset of the JavaScript Programming Language, Standard ECMA-262 3rd Edition - December 1999. JSON is a text format that is completely language independent but uses conventions that are familiar to programmers of the C-family of languages, including C, C++, C#, Java, JavaScript, Perl, Python, and many others. These properties make JSON an ideal data-interchange language. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/net/minidev/json-smart/2.4.10/json-smart-2.4.10.jar
MD5: 36e22527b5f44ea6f0ff3086608cbf38
SHA1: 91cb329e9424bf32131eeb1ce2d17bf31b9899bc
SHA256: 70cab5e9488630dc631b1fc6e7fa550d95cddd19ba14db39ceca7cabfbd4e5ae
Referenced In Projects/Scopes: shardingsphere-proxy-frontend-mysql:runtime shardingsphere-proxy-frontend-postgresql:runtime shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-agent-tracing-core:provided shardingsphere-agent-logging-file:provided shardingsphere-data-pipeline-postgresql:runtime shardingsphere-sql-federation-core:runtime shardingsphere-test-e2e-transaction:runtime shardingsphere-agent-plugin-core:provided shardingsphere-proxy-backend-opengauss:runtime shardingsphere-test-e2e-agent-plugins-logging-file:runtime shardingsphere-agent-plugin-logging:provided shardingsphere-infra-database-hive:provided shardingsphere-test-util:runtime shardingsphere-test-it-parser:runtime shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-spi:runtime shardingsphere-test-e2e-showprocesslist:runtime shardingsphere-test-e2e-agent-engine:runtime shardingsphere-agent-tracing-type:provided shardingsphere-data-pipeline-cdc-core:runtime shardingsphere-test-e2e-agent-plugins-jaeger:runtime shardingsphere-sql-federation-executor:runtime shardingsphere-agent-plugins:provided shardingsphere-data-pipeline-core:runtime shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-distribution:runtime shardingsphere-test-e2e-agent-jdbc-fixture:runtime shardingsphere-agent-logging-type:provided shardingsphere-test-e2e-pipeline:runtime shardingsphere-test-it-pipeline:runtime shardingsphere-data-pipeline-scenario-migration:runtime shardingsphere-jdbc:runtime shardingsphere-sql-federation-distsql-handler:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-data-pipeline-opengauss:runtime shardingsphere-data-pipeline-distsql-handler:runtime shardingsphere-jdbc-distribution:runtime shardingsphere-test-it-optimizer:runtime shardingsphere-test-e2e-agent-proxy-fixture:runtime shardingsphere-test-e2e-sql:runtime shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-agent-plugins-zipkin:runtime shardingsphere-test-e2e-agent-plugins-metrics-prometheus:runtime shardingsphere-test-e2e-env:runtime shardingsphere-proxy-backend-mysql:runtime shardingsphere-data-pipeline-scenario-consistencycheck:runtime shardingsphere-sql-federation-optimizer:runtime shardingsphere-proxy-backend-core:runtime shardingsphere-test-e2e-driver:runtime shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-bootstrap:runtime shardingsphere-proxy-frontend-opengauss:runtime shardingsphere-proxy-backend-postgresql:runtime shardingsphere-agent-plugin-metrics:provided json-smart-2.4.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/com.jayway.jsonpath/json-path@2.9.0 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/com.jayway.jsonpath/json-path@2.9.0 pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name json-smart High Vendor jar package name json Highest Vendor jar package name minidev Highest Vendor jar package name net Highest Vendor jar package name parser Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://urielch.github.io/ Low Vendor Manifest bundle-symbolicname net.minidev.json-smart Medium Vendor pom artifactid json-smart Highest Vendor pom artifactid json-smart Low Vendor pom developer email adoneitan@gmail.com Low Vendor pom developer email shoothzj@gmail.com Low Vendor pom developer email uchemouni@gmail.com Low Vendor pom developer id erav Medium Vendor pom developer id Shoothzj Medium Vendor pom developer id uriel Medium Vendor pom developer name Eitan Raviv Medium Vendor pom developer name Uriel Chemouni Medium Vendor pom developer name ZhangJian He Medium Vendor pom groupid net.minidev Highest Vendor pom name JSON Small and Fast Parser High Vendor pom organization name Chemouni Uriel High Vendor pom organization url https://urielch.github.io/ Medium Vendor pom url https://urielch.github.io/ Highest Product file name json-smart High Product jar package name json Highest Product jar package name minidev Highest Product jar package name net Highest Product jar package name parser Highest Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://urielch.github.io/ Low Product Manifest Bundle-Name json-smart Medium Product Manifest bundle-symbolicname net.minidev.json-smart Medium Product pom artifactid json-smart Highest Product pom developer email adoneitan@gmail.com Low Product pom developer email shoothzj@gmail.com Low Product pom developer email uchemouni@gmail.com Low Product pom developer id erav Low Product pom developer id Shoothzj Low Product pom developer id uriel Low Product pom developer name Eitan Raviv Low Product pom developer name Uriel Chemouni Low Product pom developer name ZhangJian He Low Product pom groupid net.minidev Highest Product pom name JSON Small and Fast Parser High Product pom organization name Chemouni Uriel Low Product pom organization url https://urielch.github.io/ Low Product pom url https://urielch.github.io/ Medium Version file version 2.4.10 High Version Manifest Bundle-Version 2.4.10 High Version pom version 2.4.10 Highest
License:
CDDL License
: http://www.opensource.org/licenses/cddl1.php File Path: /home/runner/.m2/repository/javax/ws/rs/jsr311-api/1.1.1/jsr311-api-1.1.1.jar
MD5: c9803468299ec255c047a280ddec510f
SHA1: 59033da2a1afd56af1ac576750a8d0b1830d59e6
SHA256: ab1534b73b5fa055808e6598a5e73b599ccda28c3159c3c0908977809422ee4a
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
jsr311-api-1.1.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name jsr311-api High Vendor hint analyzer vendor web services Medium Vendor jar package name javax Highest Vendor jar package name rs Highest Vendor jar package name ws Highest Vendor Manifest bundle-docurl http://www.sun.com/ Low Vendor Manifest bundle-symbolicname javax.ws.rs.jsr311-api Medium Vendor Manifest extension-name javax.ws.rs Medium Vendor Manifest specification-vendor Sun Microsystems, Inc. Low Vendor pom artifactid jsr311-api Highest Vendor pom artifactid jsr311-api Low Vendor pom groupid javax.ws.rs Highest Vendor pom name jsr311-api High Vendor pom organization name Sun Microsystems, Inc High Vendor pom organization url http://www.sun.com/ Medium Vendor pom url https://jsr311.dev.java.net Highest Product file name jsr311-api High Product hint analyzer product web services Medium Product jar package name javax Highest Product jar package name rs Highest Product jar package name ws Highest Product Manifest bundle-docurl http://www.sun.com/ Low Product Manifest Bundle-Name jsr311-api Medium Product Manifest bundle-symbolicname javax.ws.rs.jsr311-api Medium Product Manifest extension-name javax.ws.rs Medium Product Manifest specification-title JAX-RS: Java API for RESTful Web Services Medium Product pom artifactid jsr311-api Highest Product pom groupid javax.ws.rs Highest Product pom name jsr311-api High Product pom organization name Sun Microsystems, Inc Low Product pom organization url http://www.sun.com/ Low Product pom url https://jsr311.dev.java.net Medium Version file version 1.1.1 High Version Manifest Bundle-Version 1.1.1 High Version Manifest specification-version 1.1.1 High Version pom version 1.1.1 Highest
Description:
The javax.transaction package. It is appropriate for inclusion in a classpath, and may be added to a Java 2 installation.
File Path: /home/runner/.m2/repository/javax/transaction/jta/1.1/jta-1.1.jarMD5: 82a10ce714f411b28f13850059de09eeSHA1: 2ca09f0b36ca7d71b762e14ea2ff09d5eac57558SHA256: b8ec163b4a47bad16f9a0b7d03c3210c6b0a29216d768031073ac20817c0ba50Referenced In Project/Scope: shardingsphere-infra-database-hive:providedjta-1.1.jar is in the transitive dependency tree of the listed items. Included by:
pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.hive/hive-jdbc@3.1.3 Evidence Type Source Name Value Confidence Vendor file name jta High Vendor jar package name javax Highest Vendor jar package name transaction Highest Vendor Manifest extension-name javax.transaction Medium Vendor Manifest specification-vendor Sun Microsystems, Inc. Low Vendor pom artifactid jta Highest Vendor pom artifactid jta Low Vendor pom groupid javax.transaction Highest Vendor pom name Java Transaction API High Vendor pom url http://java.sun.com/products/jta Highest Product file name jta High Product jar package name javax Highest Product jar package name transaction Highest Product Manifest extension-name javax.transaction Medium Product Manifest specification-title Java Transaction API Specification Medium Product pom artifactid jta Highest Product pom groupid javax.transaction Highest Product pom name Java Transaction API High Product pom url http://java.sun.com/products/jta Medium Version file version 1.1 High Version Manifest specification-version 1.1 High Version pom version 1.1 Highest
Related Dependencies transaction-api-1.1.jarFile Path: /home/runner/.m2/repository/javax/transaction/transaction-api/1.1/transaction-api-1.1.jar MD5: 82a10ce714f411b28f13850059de09ee SHA1: 2ca09f0b36ca7d71b762e14ea2ff09d5eac57558 SHA256: b8ec163b4a47bad16f9a0b7d03c3210c6b0a29216d768031073ac20817c0ba50 pkg:maven/javax.transaction/transaction-api@1.1 Description:
Narayana: ArjunaJTA jta File Path: /home/runner/.m2/repository/org/jboss/narayana/jta/jta/5.12.7.Final/jta-5.12.7.Final.jarMD5: 4570c0e0510f471457a179fe96abe9bfSHA1: 9eacf117643cac647f7f849efc6e8deea3cfe2f0SHA256: de58da3aea4ab03f386f8642dec716ce888a3b3e92c423137af25cfc161c542bReferenced In Projects/Scopes:
shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-transaction-xa-narayana:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile jta-5.12.7.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-narayana@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name jta High Vendor jar package name jta Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest implementation-url http://www.jboss.org/ Low Vendor Manifest Implementation-Vendor JBoss by Red Hat, Inc. High Vendor Manifest Implementation-Vendor-Id http://www.jboss.org/ Medium Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor Manifest specification-vendor JBoss by Red Hat Low Vendor pom artifactid jta Highest Vendor pom artifactid jta Low Vendor pom groupid org.jboss.narayana.jta Highest Vendor pom name Narayana: ArjunaJTA jta High Vendor pom parent-artifactid narayana-jta-all Low Product file name jta High Product jar package name jta Highest Product Manifest build-jdk-spec 11 Low Product Manifest Implementation-Title Narayana: ArjunaJTA jta High Product Manifest implementation-url http://www.jboss.org/ Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title Narayana: ArjunaJTA jta Medium Product pom artifactid jta Highest Product pom groupid org.jboss.narayana.jta Highest Product pom name Narayana: ArjunaJTA jta High Product pom parent-artifactid narayana-jta-all Medium Version Manifest Implementation-Version 5.12.7.Final High Version pom version 5.12.7.Final Highest
Description:
Module "junit-jupiter-api" of JUnit 5. License:
Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html File Path: /home/runner/.m2/repository/org/junit/jupiter/junit-jupiter-api/5.10.3/junit-jupiter-api-5.10.3.jar
MD5: 9c5af4543b8784a55eab254418cc367b
SHA1: a22aa91d1d6c69b2020a9aeb6d095ea81132bfa5
SHA256: 6efe6e01ca1ff79b7bf4c6f1eed0b29292e166c27eaf7b00ac981a14d4de61aa
Referenced In Projects/Scopes: shardingsphere-test-it-parser:compile shardingsphere-test-util:compile shardingsphere-test-it-yaml:compile junit-jupiter-api-5.10.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-yaml@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name junit-jupiter-api High Vendor jar package name api Highest Vendor jar package name junit Highest Vendor jar package name jupiter Highest Vendor Manifest build-date 2024-06-27 Low Vendor Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Vendor Manifest build-time 16:07:04.699+0200 Low Vendor Manifest bundle-symbolicname junit-jupiter-api Medium Vendor Manifest Implementation-Vendor junit.org High Vendor Manifest specification-vendor junit.org Low Vendor pom artifactid junit-jupiter-api Highest Vendor pom artifactid junit-jupiter-api Low Vendor pom developer email business@johanneslink.net Low Vendor pom developer email derancourt.juliette@gmail.com Low Vendor pom developer email mail@marcphilipp.de Low Vendor pom developer email matthias.merdes@heidelpay.com Low Vendor pom developer email sam@sambrannen.com Low Vendor pom developer email sormuras@gmail.com Low Vendor pom developer email stefan.bechtold@me.com Low Vendor pom developer id bechte Medium Vendor pom developer id jlink Medium Vendor pom developer id juliette-derancourt Medium Vendor pom developer id marcphilipp Medium Vendor pom developer id mmerdes Medium Vendor pom developer id sbrannen Medium Vendor pom developer id sormuras Medium Vendor pom developer name Christian Stein Medium Vendor pom developer name Johannes Link Medium Vendor pom developer name Juliette de Rancourt Medium Vendor pom developer name Marc Philipp Medium Vendor pom developer name Matthias Merdes Medium Vendor pom developer name Sam Brannen Medium Vendor pom developer name Stefan Bechtold Medium Vendor pom groupid org.junit.jupiter Highest Vendor pom name JUnit Jupiter API High Vendor pom url https://junit.org/junit5/ Highest Product file name junit-jupiter-api High Product jar package name api Highest Product jar package name junit Highest Product jar package name jupiter Highest Product Manifest build-date 2024-06-27 Low Product Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Product Manifest build-time 16:07:04.699+0200 Low Product Manifest Bundle-Name JUnit Jupiter API Medium Product Manifest bundle-symbolicname junit-jupiter-api Medium Product Manifest Implementation-Title junit-jupiter-api High Product Manifest specification-title junit-jupiter-api Medium Product pom artifactid junit-jupiter-api Highest Product pom developer email business@johanneslink.net Low Product pom developer email derancourt.juliette@gmail.com Low Product pom developer email mail@marcphilipp.de Low Product pom developer email matthias.merdes@heidelpay.com Low Product pom developer email sam@sambrannen.com Low Product pom developer email sormuras@gmail.com Low Product pom developer email stefan.bechtold@me.com Low Product pom developer id bechte Low Product pom developer id jlink Low Product pom developer id juliette-derancourt Low Product pom developer id marcphilipp Low Product pom developer id mmerdes Low Product pom developer id sbrannen Low Product pom developer id sormuras Low Product pom developer name Christian Stein Low Product pom developer name Johannes Link Low Product pom developer name Juliette de Rancourt Low Product pom developer name Marc Philipp Low Product pom developer name Matthias Merdes Low Product pom developer name Sam Brannen Low Product pom developer name Stefan Bechtold Low Product pom groupid org.junit.jupiter Highest Product pom name JUnit Jupiter API High Product pom url https://junit.org/junit5/ Medium Version file version 5.10.3 High Version Manifest Bundle-Version 5.10.3 High Version Manifest Implementation-Version 5.10.3 High Version pom version 5.10.3 Highest
Description:
Module "junit-jupiter-engine" of JUnit 5. License:
Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html File Path: /home/runner/.m2/repository/org/junit/jupiter/junit-jupiter-engine/5.10.3/junit-jupiter-engine-5.10.3.jar
MD5: c87ca6659d594120a6030a2760bcdf14
SHA1: 48c14e866bb1a87ca35d24ff068463bb202ada24
SHA256: bbd3ce8dc11e9925071ef9691d68af1ab6e712faa6851f7c5275bc8aafc88673
Referenced In Projects/Scopes: shardingsphere-test-it-parser:compile shardingsphere-test-util:compile shardingsphere-test-it-yaml:compile junit-jupiter-engine-5.10.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-yaml@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name junit-jupiter-engine High Vendor jar package name engine Highest Vendor jar package name junit Highest Vendor jar package name jupiter Highest Vendor Manifest build-date 2024-06-27 Low Vendor Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Vendor Manifest build-time 16:07:04.699+0200 Low Vendor Manifest bundle-symbolicname junit-jupiter-engine Medium Vendor Manifest Implementation-Vendor junit.org High Vendor Manifest provide-capability org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.10.3" Low Vendor Manifest specification-vendor junit.org Low Vendor pom artifactid junit-jupiter-engine Highest Vendor pom artifactid junit-jupiter-engine Low Vendor pom developer email business@johanneslink.net Low Vendor pom developer email derancourt.juliette@gmail.com Low Vendor pom developer email mail@marcphilipp.de Low Vendor pom developer email matthias.merdes@heidelpay.com Low Vendor pom developer email sam@sambrannen.com Low Vendor pom developer email sormuras@gmail.com Low Vendor pom developer email stefan.bechtold@me.com Low Vendor pom developer id bechte Medium Vendor pom developer id jlink Medium Vendor pom developer id juliette-derancourt Medium Vendor pom developer id marcphilipp Medium Vendor pom developer id mmerdes Medium Vendor pom developer id sbrannen Medium Vendor pom developer id sormuras Medium Vendor pom developer name Christian Stein Medium Vendor pom developer name Johannes Link Medium Vendor pom developer name Juliette de Rancourt Medium Vendor pom developer name Marc Philipp Medium Vendor pom developer name Matthias Merdes Medium Vendor pom developer name Sam Brannen Medium Vendor pom developer name Stefan Bechtold Medium Vendor pom groupid org.junit.jupiter Highest Vendor pom name JUnit Jupiter Engine High Vendor pom url https://junit.org/junit5/ Highest Product file name junit-jupiter-engine High Product jar package name engine Highest Product jar package name junit Highest Product jar package name jupiter Highest Product Manifest build-date 2024-06-27 Low Product Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Product Manifest build-time 16:07:04.699+0200 Low Product Manifest Bundle-Name JUnit Jupiter Engine Medium Product Manifest bundle-symbolicname junit-jupiter-engine Medium Product Manifest Implementation-Title junit-jupiter-engine High Product Manifest provide-capability org.junit.platform.engine;org.junit.platform.engine=junit-jupiter;version:Version="5.10.3" Low Product Manifest specification-title junit-jupiter-engine Medium Product pom artifactid junit-jupiter-engine Highest Product pom developer email business@johanneslink.net Low Product pom developer email derancourt.juliette@gmail.com Low Product pom developer email mail@marcphilipp.de Low Product pom developer email matthias.merdes@heidelpay.com Low Product pom developer email sam@sambrannen.com Low Product pom developer email sormuras@gmail.com Low Product pom developer email stefan.bechtold@me.com Low Product pom developer id bechte Low Product pom developer id jlink Low Product pom developer id juliette-derancourt Low Product pom developer id marcphilipp Low Product pom developer id mmerdes Low Product pom developer id sbrannen Low Product pom developer id sormuras Low Product pom developer name Christian Stein Low Product pom developer name Johannes Link Low Product pom developer name Juliette de Rancourt Low Product pom developer name Marc Philipp Low Product pom developer name Matthias Merdes Low Product pom developer name Sam Brannen Low Product pom developer name Stefan Bechtold Low Product pom groupid org.junit.jupiter Highest Product pom name JUnit Jupiter Engine High Product pom url https://junit.org/junit5/ Medium Version file version 5.10.3 High Version Manifest Bundle-Version 5.10.3 High Version Manifest Implementation-Version 5.10.3 High Version pom version 5.10.3 Highest
Description:
Module "junit-jupiter-params" of JUnit 5. License:
Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html File Path: /home/runner/.m2/repository/org/junit/jupiter/junit-jupiter-params/5.10.3/junit-jupiter-params-5.10.3.jar
MD5: 8c0d875131fa73e688df785a3b2f338d
SHA1: 4852f4e4af9074d9214213b199751f99efeab8b9
SHA256: 7c3ed8cefb12496b76c53c3da986ea8f0bf3f426781869475551ae3a506c1ad8
Referenced In Projects/Scopes: shardingsphere-test-it-parser:compile shardingsphere-test-util:compile junit-jupiter-params-5.10.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name junit-jupiter-params High Vendor jar package name junit Highest Vendor jar package name jupiter Highest Vendor jar package name params Highest Vendor Manifest build-date 2024-06-27 Low Vendor Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Vendor Manifest build-time 16:07:04.699+0200 Low Vendor Manifest bundle-symbolicname junit-jupiter-params Medium Vendor Manifest Implementation-Vendor junit.org High Vendor Manifest specification-vendor junit.org Low Vendor pom artifactid junit-jupiter-params Highest Vendor pom artifactid junit-jupiter-params Low Vendor pom developer email business@johanneslink.net Low Vendor pom developer email derancourt.juliette@gmail.com Low Vendor pom developer email mail@marcphilipp.de Low Vendor pom developer email matthias.merdes@heidelpay.com Low Vendor pom developer email sam@sambrannen.com Low Vendor pom developer email sormuras@gmail.com Low Vendor pom developer email stefan.bechtold@me.com Low Vendor pom developer id bechte Medium Vendor pom developer id jlink Medium Vendor pom developer id juliette-derancourt Medium Vendor pom developer id marcphilipp Medium Vendor pom developer id mmerdes Medium Vendor pom developer id sbrannen Medium Vendor pom developer id sormuras Medium Vendor pom developer name Christian Stein Medium Vendor pom developer name Johannes Link Medium Vendor pom developer name Juliette de Rancourt Medium Vendor pom developer name Marc Philipp Medium Vendor pom developer name Matthias Merdes Medium Vendor pom developer name Sam Brannen Medium Vendor pom developer name Stefan Bechtold Medium Vendor pom groupid org.junit.jupiter Highest Vendor pom name JUnit Jupiter Params High Vendor pom url https://junit.org/junit5/ Highest Product file name junit-jupiter-params High Product jar package name junit Highest Product jar package name jupiter Highest Product jar package name params Highest Product Manifest build-date 2024-06-27 Low Product Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Product Manifest build-time 16:07:04.699+0200 Low Product Manifest Bundle-Name JUnit Jupiter Params Medium Product Manifest bundle-symbolicname junit-jupiter-params Medium Product Manifest Implementation-Title junit-jupiter-params High Product Manifest specification-title junit-jupiter-params Medium Product pom artifactid junit-jupiter-params Highest Product pom developer email business@johanneslink.net Low Product pom developer email derancourt.juliette@gmail.com Low Product pom developer email mail@marcphilipp.de Low Product pom developer email matthias.merdes@heidelpay.com Low Product pom developer email sam@sambrannen.com Low Product pom developer email sormuras@gmail.com Low Product pom developer email stefan.bechtold@me.com Low Product pom developer id bechte Low Product pom developer id jlink Low Product pom developer id juliette-derancourt Low Product pom developer id marcphilipp Low Product pom developer id mmerdes Low Product pom developer id sbrannen Low Product pom developer id sormuras Low Product pom developer name Christian Stein Low Product pom developer name Johannes Link Low Product pom developer name Juliette de Rancourt Low Product pom developer name Marc Philipp Low Product pom developer name Matthias Merdes Low Product pom developer name Sam Brannen Low Product pom developer name Stefan Bechtold Low Product pom groupid org.junit.jupiter Highest Product pom name JUnit Jupiter Params High Product pom url https://junit.org/junit5/ Medium Version file version 5.10.3 High Version Manifest Bundle-Version 5.10.3 High Version Manifest Implementation-Version 5.10.3 High Version pom version 5.10.3 Highest
Description:
Module "junit-platform-engine" of JUnit 5. License:
Eclipse Public License v2.0: https://www.eclipse.org/legal/epl-v20.html File Path: /home/runner/.m2/repository/org/junit/platform/junit-platform-engine/1.10.3/junit-platform-engine-1.10.3.jar
MD5: 8fe56ec6a59c1e208e8ba0def9e47bf3
SHA1: 365a320c3cfd47f3346625e541e424e35dc75c42
SHA256: df7c32bf75cf47c4c8ddd1942091027947a7d765d30b731fe00830115fafa133
Referenced In Projects/Scopes: shardingsphere-test-it-parser:compile shardingsphere-test-util:compile shardingsphere-test-it-yaml:compile junit-platform-engine-1.10.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-engine@5.10.3 Evidence Type Source Name Value Confidence Vendor file name junit-platform-engine High Vendor jar package name engine Highest Vendor jar package name junit Highest Vendor jar package name platform Highest Vendor Manifest build-date 2024-06-27 Low Vendor Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Vendor Manifest build-time 16:07:04.699+0200 Low Vendor Manifest bundle-symbolicname junit-platform-engine Medium Vendor Manifest Implementation-Vendor junit.org High Vendor Manifest specification-vendor junit.org Low Vendor pom artifactid junit-platform-engine Highest Vendor pom artifactid junit-platform-engine Low Vendor pom developer email business@johanneslink.net Low Vendor pom developer email derancourt.juliette@gmail.com Low Vendor pom developer email mail@marcphilipp.de Low Vendor pom developer email matthias.merdes@heidelpay.com Low Vendor pom developer email sam@sambrannen.com Low Vendor pom developer email sormuras@gmail.com Low Vendor pom developer email stefan.bechtold@me.com Low Vendor pom developer id bechte Medium Vendor pom developer id jlink Medium Vendor pom developer id juliette-derancourt Medium Vendor pom developer id marcphilipp Medium Vendor pom developer id mmerdes Medium Vendor pom developer id sbrannen Medium Vendor pom developer id sormuras Medium Vendor pom developer name Christian Stein Medium Vendor pom developer name Johannes Link Medium Vendor pom developer name Juliette de Rancourt Medium Vendor pom developer name Marc Philipp Medium Vendor pom developer name Matthias Merdes Medium Vendor pom developer name Sam Brannen Medium Vendor pom developer name Stefan Bechtold Medium Vendor pom groupid org.junit.platform Highest Vendor pom name JUnit Platform Engine API High Vendor pom url https://junit.org/junit5/ Highest Product file name junit-platform-engine High Product jar package name engine Highest Product jar package name junit Highest Product jar package name platform Highest Product Manifest build-date 2024-06-27 Low Product Manifest build-revision 55d12321315b11eaf6ed87e73c47bcdc39ade588 Low Product Manifest build-time 16:07:04.699+0200 Low Product Manifest Bundle-Name JUnit Platform Engine API Medium Product Manifest bundle-symbolicname junit-platform-engine Medium Product Manifest Implementation-Title junit-platform-engine High Product Manifest specification-title junit-platform-engine Medium Product pom artifactid junit-platform-engine Highest Product pom developer email business@johanneslink.net Low Product pom developer email derancourt.juliette@gmail.com Low Product pom developer email mail@marcphilipp.de Low Product pom developer email matthias.merdes@heidelpay.com Low Product pom developer email sam@sambrannen.com Low Product pom developer email sormuras@gmail.com Low Product pom developer email stefan.bechtold@me.com Low Product pom developer id bechte Low Product pom developer id jlink Low Product pom developer id juliette-derancourt Low Product pom developer id marcphilipp Low Product pom developer id mmerdes Low Product pom developer id sbrannen Low Product pom developer id sormuras Low Product pom developer name Christian Stein Low Product pom developer name Johannes Link Low Product pom developer name Juliette de Rancourt Low Product pom developer name Marc Philipp Low Product pom developer name Matthias Merdes Low Product pom developer name Sam Brannen Low Product pom developer name Stefan Bechtold Low Product pom groupid org.junit.platform Highest Product pom name JUnit Platform Engine API High Product pom url https://junit.org/junit5/ Medium Version file version 1.10.3 High Version Manifest Bundle-Version 1.10.3 High Version Manifest Implementation-Version 1.10.3 High Version pom version 1.10.3 Highest
Related Dependencies junit-platform-commons-1.10.3.jarFile Path: /home/runner/.m2/repository/org/junit/platform/junit-platform-commons/1.10.3/junit-platform-commons-1.10.3.jar MD5: 83ff374dd428b03f1cf70d0143259f01 SHA1: a353d42a2f13343a7cb80c5228ae66ff64495481 SHA256: 9787f04d49db59397cdd7555d421a5bd2d1445666997d327b94f85e38bed57f1 pkg:maven/org.junit.platform/junit-platform-commons@1.10.3 Description:
Kerby-kerb Admin facilities File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-admin/1.0.1/kerb-admin-1.0.1.jarMD5: a673628234b00564b9d3254990348a85SHA1: 7868b29620b92aa1040fe20d21ba09f2506207aaSHA256: 27b012f556b02bdf4ecd0742a7ecdd725a562e95a194e3413662fe2e781ff889Referenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-admin-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-admin High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-admin Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-admin Highest Vendor pom artifactid kerb-admin Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby-kerb Admin High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-admin High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby-kerb Admin High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-admin Low Product Manifest specification-title Kerby-kerb Admin Medium Product pom artifactid kerb-admin Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby-kerb Admin High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby-kerb Client File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-client/1.0.1/kerb-client-1.0.1.jarMD5: bf15f4b482bd784fa8b58a3f509a4d44SHA1: a82d2503e718d17628fc9b4db411b001573f61b7SHA256: 020fa95a809b96358ab95d43666471838372659af1cbc3f24ef73c29374e9af0Referenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-client-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-client High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-client Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-client Highest Vendor pom artifactid kerb-client Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby-kerb Client High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-client High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby-kerb Client High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-client Low Product Manifest specification-title Kerby-kerb Client Medium Product pom artifactid kerb-client Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby-kerb Client High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby-kerb Common facilities for both client and server File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-common/1.0.1/kerb-common-1.0.1.jarMD5: 678e68224b54168f3106b5644ef6f45fSHA1: e358016010b6355630e398db20d83925462fa4cdSHA256: f62bb275781f8092bb6252e4ed201c9f5e4ab7a3d49b650ab58c87862b0bb2deReferenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-common-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-common High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-common Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-common Highest Vendor pom artifactid kerb-common Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby-kerb Common High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-common High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby-kerb Common High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-common Low Product Manifest specification-title Kerby-kerb Common Medium Product pom artifactid kerb-common Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby-kerb Common High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby-kerb core facilities File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-core/1.0.1/kerb-core-1.0.1.jarMD5: 545c60f29fc4d57a1e50e3be72c88fe0SHA1: 82357e97a5c1b505beb0f6c227d9f39b2d7fdde0SHA256: 4db26bc4a106603044d8883f7280abc803b055b36f5c510a3fffc41e5de4c651Referenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-core-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-core High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-core Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-core Highest Vendor pom artifactid kerb-core Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby-kerb core High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-core High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby-kerb core High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-core Low Product Manifest specification-title Kerby-kerb core Medium Product pom artifactid kerb-core Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby-kerb core High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby-kerb Crypto facility File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-crypto/1.0.1/kerb-crypto-1.0.1.jarMD5: 4a201fca38ffe52565f5816d7c708ccdSHA1: 66eab4bbf91fa01ed4f72ce771db28c59d35a843SHA256: af94527564908b5a8ccfdfa8e67dd61c09e062459a0110d85115c42fc8f82b41Referenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-crypto-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-crypto High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-crypto Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-crypto Highest Vendor pom artifactid kerb-crypto Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby-kerb Crypto High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-crypto High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby-kerb Crypto High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-crypto Low Product Manifest specification-title Kerby-kerb Crypto Medium Product pom artifactid kerb-crypto Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby-kerb Crypto High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby-kerb Identity File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-identity/1.0.1/kerb-identity-1.0.1.jarMD5: b25172596ffaa92105bae3d5f54639ffSHA1: eb91bc9b9ff26bfcca077cf1a888fb09e8ce72beSHA256: 35fd995cc7a0c71f86adaf716dee34f6e4d1e473eff452a74f4430bd196e6424Referenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-identity-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-identity High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-identity Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-identity Highest Vendor pom artifactid kerb-identity Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby-kerb Identity High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-identity High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby-kerb Identity High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-identity Low Product Manifest specification-title Kerby-kerb Identity Medium Product pom artifactid kerb-identity Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby-kerb Identity High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby-kerb Server File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-server/1.0.1/kerb-server-1.0.1.jarMD5: 0c067e61bd55c894a2ed67d25c75b323SHA1: c56ffb4a6541864daf9868895b79c0c33427fd8cSHA256: dff4eebc6cadaa8bdc1084fc1d4c20fda954aed74913845e79c89572768e463fReferenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-server-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-server High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-server Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-server Highest Vendor pom artifactid kerb-server Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby-kerb Server High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-server High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby-kerb Server High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-server Low Product Manifest specification-title Kerby-kerb Server Medium Product pom artifactid kerb-server Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby-kerb Server High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerb Simple Kdc File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-simplekdc/1.0.1/kerb-simplekdc-1.0.1.jarMD5: 16517ceeb9c76a7499d8ae5b98607c8aSHA1: 1e39adf7c3f5e87695789994b694d24c1dda5752SHA256: 9c9976a603833c001a8a4a4e5b2ea0a6775a84e5656b0eca1fe4eb4d068ceda7Referenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-simplekdc-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-simplekdc High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-simplekdc Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-simplekdc Highest Vendor pom artifactid kerb-simplekdc Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerb Simple Kdc High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-simplekdc High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerb Simple Kdc High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-simplekdc Low Product Manifest specification-title Kerb Simple Kdc Medium Product pom artifactid kerb-simplekdc Highest Product pom groupid org.apache.kerby Highest Product pom name Kerb Simple Kdc High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby-kerb Utilities File Path: /home/runner/.m2/repository/org/apache/kerby/kerb-util/1.0.1/kerb-util-1.0.1.jarMD5: 424542890d4dc9f61b1754a12a1c7758SHA1: 93d37f677addd2450b199e8da8fcac243ceb8a88SHA256: 9cb1a2715a35cbabc9e8f1be3287bb086100763847e2f17577b72a025f8adaabReferenced In Project/Scope: shardingsphere-infra-database-hive:providedkerb-util-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerb-util High Vendor jar package name apache Highest Vendor jar package name kerb Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-util Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerb-util Highest Vendor pom artifactid kerb-util Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby-kerb Util High Vendor pom parent-artifactid kerby-kerb Low Product file name kerb-util High Product jar package name apache Highest Product jar package name kerb Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby-kerb Util High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-kerb/kerb-util Low Product Manifest specification-title Kerby-kerb Util Medium Product pom artifactid kerb-util Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby-kerb Util High Product pom parent-artifactid kerby-kerb Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby ASN1 Project File Path: /home/runner/.m2/repository/org/apache/kerby/kerby-asn1/1.0.1/kerby-asn1-1.0.1.jarMD5: 95c31186c0ec12b85bde99e286fe2f8cSHA1: d54a9712c29c4e6d9d9ba483fad3d450be135fffSHA256: 010a3c33e5b652f11cb29a6e66826a24331e526cf58662dccb4d6695fc6ca59dReferenced In Project/Scope: shardingsphere-infra-database-hive:providedkerby-asn1-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerby-asn1 High Vendor jar package name apache Highest Vendor jar package name asn1 Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-common/kerby-asn1 Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerby-asn1 Highest Vendor pom artifactid kerby-asn1 Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby ASN1 Project High Vendor pom parent-artifactid kerby-common Low Product file name kerby-asn1 High Product jar package name apache Highest Product jar package name asn1 Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby ASN1 Project High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-common/kerby-asn1 Low Product Manifest specification-title Kerby ASN1 Project Medium Product pom artifactid kerby-asn1 Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby ASN1 Project High Product pom parent-artifactid kerby-common Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby config library File Path: /home/runner/.m2/repository/org/apache/kerby/kerby-config/1.0.1/kerby-config-1.0.1.jarMD5: f70f90ed440cee40f4f59f9c75cd6b96SHA1: a4c3885fa656a92508315aca9b4632197a454b18SHA256: 244520e9bd61e8cd40a475fe615fbea45ca042fc9d50780df30bc7146f77b8c9Referenced In Project/Scope: shardingsphere-infra-database-hive:providedkerby-config-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerby-config High Vendor jar package name apache Highest Vendor jar package name config Highest Vendor jar package name kerby Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-common/kerby-config Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerby-config Highest Vendor pom artifactid kerby-config Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby Config High Vendor pom parent-artifactid kerby-common Low Product file name kerby-config High Product jar package name apache Highest Product jar package name config Highest Product jar package name kerby Highest Product Manifest Implementation-Title Kerby Config High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-common/kerby-config Low Product Manifest specification-title Kerby Config Medium Product pom artifactid kerby-config Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby Config High Product pom parent-artifactid kerby-common Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby PKIX Project File Path: /home/runner/.m2/repository/org/apache/kerby/kerby-pkix/1.0.1/kerby-pkix-1.0.1.jarMD5: 4f99a872b054dead71460c3ed3bca6acSHA1: 4c1fd1f78ba7c16cf6fcd663ddad7eed34b4d911SHA256: 0410bc1950b57f4792ea6b86df59a2ee87e4ad69b33a17ded438e6686894346aReferenced In Project/Scope: shardingsphere-infra-database-hive:providedkerby-pkix-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerby-pkix High Vendor jar package name apache Highest Vendor jar package name kerby Highest Vendor jar package name pkix Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-pkix Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerby-pkix Highest Vendor pom artifactid kerby-pkix Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby PKIX Project High Vendor pom parent-artifactid kerby-all Low Product file name kerby-pkix High Product jar package name apache Highest Product jar package name kerby Highest Product jar package name pkix Highest Product Manifest Implementation-Title Kerby PKIX Project High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-pkix Low Product Manifest specification-title Kerby PKIX Project Medium Product pom artifactid kerby-pkix Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby PKIX Project High Product pom parent-artifactid kerby-all Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby common util, without any 3rd party dependency File Path: /home/runner/.m2/repository/org/apache/kerby/kerby-util/1.0.1/kerby-util-1.0.1.jarMD5: 21974b90e4e4d096b526268712dfd4cbSHA1: 389b730dc4e454f70d72ec19ddac2528047f157eSHA256: db7e2f329e160aaac305268ccb7287c16cf5542cffdd786a8592212df7c315aaReferenced In Project/Scope: shardingsphere-infra-database-hive:providedkerby-util-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerby-util High Vendor jar package name apache Highest Vendor jar package name kerby Highest Vendor jar package name util Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-common/kerby-util Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerby-util Highest Vendor pom artifactid kerby-util Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby Util High Vendor pom parent-artifactid kerby-common Low Product file name kerby-util High Product jar package name apache Highest Product jar package name kerby Highest Product jar package name util Highest Product Manifest Implementation-Title Kerby Util High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-common/kerby-util Low Product Manifest specification-title Kerby Util Medium Product pom artifactid kerby-util Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby Util High Product pom parent-artifactid kerby-common Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kerby XDR Project File Path: /home/runner/.m2/repository/org/apache/kerby/kerby-xdr/1.0.1/kerby-xdr-1.0.1.jarMD5: 052ad9372894a4f0ef0f7792dd7daa9aSHA1: 7d1b5b69a5ea87fb2f62498710d9d788d17beb2bSHA256: c24e2d9fbaef40a0a61ee36c19e41db5141bfbe7a2669be0227dee86ccca6d6fReferenced In Project/Scope: shardingsphere-infra-database-hive:providedkerby-xdr-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name kerby-xdr High Vendor jar package name apache Highest Vendor jar package name kerby Highest Vendor jar package name xdr Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-common/kerby-xdr Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid kerby-xdr Highest Vendor pom artifactid kerby-xdr Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Kerby XDR Project High Vendor pom parent-artifactid kerby-common Low Product file name kerby-xdr High Product jar package name apache Highest Product jar package name kerby Highest Product jar package name xdr Highest Product Manifest Implementation-Title Kerby XDR Project High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-common/kerby-xdr Low Product Manifest specification-title Kerby XDR Project Medium Product pom artifactid kerby-xdr Highest Product pom groupid org.apache.kerby Highest Product pom name Kerby XDR Project High Product pom parent-artifactid kerby-common Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
Description:
Kotlin Standard Library for JVM License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/jetbrains/kotlin/kotlin-stdlib/1.9.10/kotlin-stdlib-1.9.10.jar
MD5: da8348128b101f854fafa9a31e3806bd
SHA1: 72812e8a368917ab5c0a5081b56915ffdfec93b7
SHA256: 55e989c512b80907799f854309f3bc7782c5b3d13932442d0379d5c472711504
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-agent-tracing-opentelemetry:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-distribution:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile kotlin-stdlib-1.9.10.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.10 pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.10 Evidence Type Source Name Value Confidence Vendor file name kotlin-stdlib High Vendor jar package name jvm Highest Vendor jar package name kotlin Highest Vendor Manifest Implementation-Vendor JetBrains High Vendor Manifest kotlin-runtime-component Main Low Vendor Manifest multi-release true Low Vendor pom artifactid kotlin-stdlib Highest Vendor pom artifactid kotlin-stdlib Low Vendor pom developer name Kotlin Team Medium Vendor pom developer org JetBrains Medium Vendor pom developer org URL https://www.jetbrains.com Medium Vendor pom groupid org.jetbrains.kotlin Highest Vendor pom name Kotlin Stdlib High Vendor pom url https://kotlinlang.org/ Highest Product file name kotlin-stdlib High Product jar package name jvm Highest Product jar package name kotlin Highest Product Manifest Implementation-Title kotlin-stdlib High Product Manifest kotlin-runtime-component Main Low Product Manifest multi-release true Low Product pom artifactid kotlin-stdlib Highest Product pom developer name Kotlin Team Low Product pom developer org JetBrains Low Product pom developer org URL https://www.jetbrains.com Low Product pom groupid org.jetbrains.kotlin Highest Product pom name Kotlin Stdlib High Product pom url https://kotlinlang.org/ Medium Version file version 1.9.10 High Version pom version 1.9.10 Highest
Related Dependencies kotlin-stdlib-common-1.9.10.jarFile Path: /home/runner/.m2/repository/org/jetbrains/kotlin/kotlin-stdlib-common/1.9.10/kotlin-stdlib-common-1.9.10.jar MD5: de4024a53c843e959f2d50ecd1f0e951 SHA1: dafaf2c27f27c09220cee312df10917d9a5d97ce SHA256: cde3341ba18a2ba262b0b7cf6c55b20c90e8d434e42c9a13e6a3f770db965a88 pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-common@1.9.10 kotlin-stdlib-jdk7-1.9.10.jarFile Path: /home/runner/.m2/repository/org/jetbrains/kotlin/kotlin-stdlib-jdk7/1.9.10/kotlin-stdlib-jdk7-1.9.10.jar MD5: 14f35bcc452b095f3034a1471960cccc SHA1: bc5bfc2690338defd5195b05c57562f2194eeb10 SHA256: ac6361bf9ad1ed382c2103d9712c47cdec166232b4903ed596e8876b0681c9b7 pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk7@1.9.10 kotlin-stdlib-jdk8-1.9.10.jarFile Path: /home/runner/.m2/repository/org/jetbrains/kotlin/kotlin-stdlib-jdk8/1.9.10/kotlin-stdlib-jdk8-1.9.10.jar MD5: d223cbd9e57f02cf4e9f3d9ed01edcee SHA1: c7510d64a83411a649c76f2778304ddf71d7437b SHA256: a4c74d94d64ce1abe53760fe0389dd941f6fc558d0dab35e47c085a11ec80f28 pkg:maven/org.jetbrains.kotlin/kotlin-stdlib-jdk8@1.9.10 Description:
An uber jar which contains all the leveldbjni platform libraries and dependencies License:
http://www.opensource.org/licenses/BSD-3-Clause File Path: /home/runner/.m2/repository/org/fusesource/leveldbjni/leveldbjni-all/1.8/leveldbjni-all-1.8.jar
MD5: 6944e9bc03c7938868e53c96726ae914
SHA1: 707350a2eeb1fa2ed77a32ddb3893ed308e941db
SHA256: c297213b0e6f9392305952753f3099a4c02e70b3656266fe01867e7b6c160ffe
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
leveldbjni-all-1.8.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name leveldbjni-all High Vendor jar package name all Highest Vendor jar package name fusesource Highest Vendor jar package name leveldbjni Highest Vendor Manifest bundle-docurl http://fusesource.com/ Low Vendor Manifest bundle-nativecode META-INF/native/windows32/leveldbjni.dll;osname=Win32;processor=x86,META-INF/native/windows64/leveldbjni.dll;osname=Win32;processor=x86-64,META-INF/native/osx/libleveldbjni.jnilib;osname=macosx;processor=x86,META-INF/native/osx/libleveldbjni.jnilib;osname=macosx;processor=x86-64,META-INF/native/linux32/libleveldbjni.so;osname=Linux;processor=x86,META-INF/native/linux64/libleveldbjni.so;osname=Linux;processor=x86-64 Low Vendor Manifest bundle-symbolicname org.fusesource.leveldbjni.leveldbjni-all Medium Vendor Manifest embed-transitive true Low Vendor pom artifactid leveldbjni-all Highest Vendor pom artifactid leveldbjni-all Low Vendor pom groupid org.fusesource.leveldbjni Highest Vendor pom name ${project.artifactId} High Vendor pom parent-artifactid leveldbjni-project Low Product file name leveldbjni-all High Product jar package name all Highest Product jar package name fusesource Highest Product jar package name leveldb Highest Product jar package name leveldbjni Highest Product Manifest bundle-docurl http://fusesource.com/ Low Product Manifest Bundle-Name leveldbjni-all Medium Product Manifest bundle-nativecode META-INF/native/windows32/leveldbjni.dll;osname=Win32;processor=x86,META-INF/native/windows64/leveldbjni.dll;osname=Win32;processor=x86-64,META-INF/native/osx/libleveldbjni.jnilib;osname=macosx;processor=x86,META-INF/native/osx/libleveldbjni.jnilib;osname=macosx;processor=x86-64,META-INF/native/linux32/libleveldbjni.so;osname=Linux;processor=x86,META-INF/native/linux64/libleveldbjni.so;osname=Linux;processor=x86-64 Low Product Manifest bundle-symbolicname org.fusesource.leveldbjni.leveldbjni-all Medium Product Manifest embed-transitive true Low Product Manifest Implementation-Title LevelDB JNI High Product pom artifactid leveldbjni-all Highest Product pom groupid org.fusesource.leveldbjni Highest Product pom name ${project.artifactId} High Product pom parent-artifactid leveldbjni-project Medium Version file version 1.8 High Version Manifest Implementation-Version 1.8 High Version pom version 1.8 Highest
File Path: /home/runner/.m2/repository/org/fusesource/leveldbjni/leveldbjni-all/1.8/leveldbjni-all-1.8.jar/META-INF/native/windows32/leveldbjni.dllMD5: 551b9310a9ed358359296a89715df2f4SHA1: bba450e93688b872b3fcaa31e8457950e97d8429SHA256: 3cf3f6284f99acad369a15f0b4eca8e0dec2b0342651c519e4665570da8a68eeReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name leveldbjni High Product file name leveldbjni High
File Path: /home/runner/.m2/repository/org/fusesource/leveldbjni/leveldbjni-all/1.8/leveldbjni-all-1.8.jar/META-INF/native/windows64/leveldbjni.dllMD5: 4b6fa20009ca1eb556e752671461a3f2SHA1: 978ca9c96c03eb220556ce5bc96c715f95a0967cSHA256: 7794f7bbc848d1a9ad98996f2c68a1cf12ac17562f646c6d7f5733404a7b5ef1Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name leveldbjni High Product file name leveldbjni High
Description:
Thrift is a software framework for scalable cross-language services development. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/thrift/libfb303/0.9.3/libfb303-0.9.3.jar
MD5: 5e1c646346ecf2750a1b8b6cb2aa1c4f
SHA1: 5d1abb695642e88558f4e7e0d32aa1925a1fd0b7
SHA256: 23fc397a42181b17bb7d0fada2213735ed8db38cfbf038d12b9c00ea7419e11b
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
libfb303-0.9.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name libfb303 High Vendor jar package name facebook Low Vendor jar package name fb303 Low Vendor pom artifactid libfb303 Highest Vendor pom artifactid libfb303 Low Vendor pom developer id aditya Medium Vendor pom developer id bmaurer Medium Vendor pom developer id bryanduxbury Medium Vendor pom developer id carl Medium Vendor pom developer id cpiro Medium Vendor pom developer id dreiss Medium Vendor pom developer id esteve Medium Vendor pom developer id geechorama Medium Vendor pom developer id jake Medium Vendor pom developer id jensg Medium Vendor pom developer id jfarrell Medium Vendor pom developer id jwang Medium Vendor pom developer id kclark Medium Vendor pom developer id marck Medium Vendor pom developer id mcslee Medium Vendor pom developer id molinaro Medium Vendor pom developer id roger Medium Vendor pom developer id todd Medium Vendor pom developer name Aditya Agarwal Medium Vendor pom developer name Andrew McGeachie Medium Vendor pom developer name Anthony Molinaro Medium Vendor pom developer name Ben Maurer Medium Vendor pom developer name Bryan Duxbury Medium Vendor pom developer name Carl Yeksigian Medium Vendor pom developer name Chris Piro Medium Vendor pom developer name David Reiss Medium Vendor pom developer name Esteve Fernandez Medium Vendor pom developer name Jake Farrell Medium Vendor pom developer name Jake Luciani Medium Vendor pom developer name James Wang Medium Vendor pom developer name Jens Geyer Medium Vendor pom developer name Kevin Clark Medium Vendor pom developer name Marc Kwiatkowski Medium Vendor pom developer name Mark Slee Medium Vendor pom developer name Roger Meier Medium Vendor pom developer name Todd Lipcon Medium Vendor pom groupid org.apache.thrift Highest Vendor pom name Apache Thrift High Vendor pom url http://thrift.apache.org Highest Product file name libfb303 High Product jar package name fb303 Low Product pom artifactid libfb303 Highest Product pom developer id aditya Low Product pom developer id bmaurer Low Product pom developer id bryanduxbury Low Product pom developer id carl Low Product pom developer id cpiro Low Product pom developer id dreiss Low Product pom developer id esteve Low Product pom developer id geechorama Low Product pom developer id jake Low Product pom developer id jensg Low Product pom developer id jfarrell Low Product pom developer id jwang Low Product pom developer id kclark Low Product pom developer id marck Low Product pom developer id mcslee Low Product pom developer id molinaro Low Product pom developer id roger Low Product pom developer id todd Low Product pom developer name Aditya Agarwal Low Product pom developer name Andrew McGeachie Low Product pom developer name Anthony Molinaro Low Product pom developer name Ben Maurer Low Product pom developer name Bryan Duxbury Low Product pom developer name Carl Yeksigian Low Product pom developer name Chris Piro Low Product pom developer name David Reiss Low Product pom developer name Esteve Fernandez Low Product pom developer name Jake Farrell Low Product pom developer name Jake Luciani Low Product pom developer name James Wang Low Product pom developer name Jens Geyer Low Product pom developer name Kevin Clark Low Product pom developer name Marc Kwiatkowski Low Product pom developer name Mark Slee Low Product pom developer name Roger Meier Low Product pom developer name Todd Lipcon Low Product pom groupid org.apache.thrift Highest Product pom name Apache Thrift High Product pom url http://thrift.apache.org Medium Version file version 0.9.3 High Version pom version 0.9.3 Highest
CVE-2021-24028 suppress
An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00. CWE-763 Release of Invalid Pointer or Reference
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2019-11938 suppress
Java Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.12.09.00. CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2019-11939 suppress
Golang Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.03.16.00. CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2019-3552 suppress
C++ Facebook Thrift servers (using cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00. CWE-755 Improper Handling of Exceptional Conditions, CWE-834 Excessive Iteration
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2019-3553 suppress
C++ Facebook Thrift servers would not error upon receiving messages declaring containers of sizes larger than the payload. As a result, malicious clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2020.02.03.00. CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2019-3558 suppress
Python Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00. CWE-755 Improper Handling of Exceptional Conditions, CWE-834 Excessive Iteration
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2019-3559 suppress
Java Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.02.18.00. CWE-755 Improper Handling of Exceptional Conditions, CWE-834 Excessive Iteration
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2019-3564 suppress
Go Facebook Thrift servers would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.03.04.00. CWE-755 Improper Handling of Exceptional Conditions, CWE-834 Excessive Iteration
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2019-3565 suppress
Legacy C++ Facebook Thrift servers (using cpp instead of cpp2) would not error upon receiving messages with containers of fields of unknown type. As a result, malicious clients could send short messages which would take a long time for the server to parse, potentially leading to denial of service. This issue affects Facebook Thrift prior to v2019.05.06.00. CWE-755 Improper Handling of Exceptional Conditions, CWE-834 Excessive Iteration
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
Thrift is a software framework for scalable cross-language services development. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/thrift/libthrift/0.9.3/libthrift-0.9.3.jar
MD5: 96af680a50acae601ce823b1da70b24a
SHA1: 8625e8f9b6f49b881fa5fd143172c2833df1ce47
SHA256: bca5e8cdee1e0fbf563de7d41c452385e7bed69723fa28225a9ce718a8ee3419
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
libthrift-0.9.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name libthrift High Vendor jar package name apache Highest Vendor jar package name thrift Highest Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-symbolicname org.apache.thrift Medium Vendor pom artifactid libthrift Highest Vendor pom artifactid libthrift Low Vendor pom developer id aditya Medium Vendor pom developer id bmaurer Medium Vendor pom developer id bryanduxbury Medium Vendor pom developer id carl Medium Vendor pom developer id cpiro Medium Vendor pom developer id dreiss Medium Vendor pom developer id esteve Medium Vendor pom developer id geechorama Medium Vendor pom developer id jake Medium Vendor pom developer id jensg Medium Vendor pom developer id jfarrell Medium Vendor pom developer id jwang Medium Vendor pom developer id kclark Medium Vendor pom developer id marck Medium Vendor pom developer id mcslee Medium Vendor pom developer id molinaro Medium Vendor pom developer id roger Medium Vendor pom developer id todd Medium Vendor pom developer name Aditya Agarwal Medium Vendor pom developer name Andrew McGeachie Medium Vendor pom developer name Anthony Molinaro Medium Vendor pom developer name Ben Maurer Medium Vendor pom developer name Bryan Duxbury Medium Vendor pom developer name Carl Yeksigian Medium Vendor pom developer name Chris Piro Medium Vendor pom developer name David Reiss Medium Vendor pom developer name Esteve Fernandez Medium Vendor pom developer name Jake Farrell Medium Vendor pom developer name Jake Luciani Medium Vendor pom developer name James Wang Medium Vendor pom developer name Jens Geyer Medium Vendor pom developer name Kevin Clark Medium Vendor pom developer name Marc Kwiatkowski Medium Vendor pom developer name Mark Slee Medium Vendor pom developer name Roger Meier Medium Vendor pom developer name Todd Lipcon Medium Vendor pom groupid org.apache.thrift Highest Vendor pom name Apache Thrift High Vendor pom url http://thrift.apache.org Highest Product file name libthrift High Product jar package name apache Highest Product jar package name thrift Highest Product Manifest bundle-activationpolicy lazy Low Product Manifest Bundle-Name Apache Thrift Medium Product Manifest bundle-symbolicname org.apache.thrift Medium Product pom artifactid libthrift Highest Product pom developer id aditya Low Product pom developer id bmaurer Low Product pom developer id bryanduxbury Low Product pom developer id carl Low Product pom developer id cpiro Low Product pom developer id dreiss Low Product pom developer id esteve Low Product pom developer id geechorama Low Product pom developer id jake Low Product pom developer id jensg Low Product pom developer id jfarrell Low Product pom developer id jwang Low Product pom developer id kclark Low Product pom developer id marck Low Product pom developer id mcslee Low Product pom developer id molinaro Low Product pom developer id roger Low Product pom developer id todd Low Product pom developer name Aditya Agarwal Low Product pom developer name Andrew McGeachie Low Product pom developer name Anthony Molinaro Low Product pom developer name Ben Maurer Low Product pom developer name Bryan Duxbury Low Product pom developer name Carl Yeksigian Low Product pom developer name Chris Piro Low Product pom developer name David Reiss Low Product pom developer name Esteve Fernandez Low Product pom developer name Jake Farrell Low Product pom developer name Jake Luciani Low Product pom developer name James Wang Low Product pom developer name Jens Geyer Low Product pom developer name Kevin Clark Low Product pom developer name Marc Kwiatkowski Low Product pom developer name Mark Slee Low Product pom developer name Roger Meier Low Product pom developer name Todd Lipcon Low Product pom groupid org.apache.thrift Highest Product pom name Apache Thrift High Product pom url http://thrift.apache.org Medium Version file version 0.9.3 High Version Manifest Bundle-Version 0.9.3 High Version Manifest Implementation-Version 0.9.3 High Version pom version 0.9.3 Highest
CVE-2016-5397 suppress
The Apache Thrift Go client library exposed the potential during code generation for command injection due to using an external formatting tool. Affected Apache Thrift 0.9.3 and older, Fixed in Apache Thrift 0.10.0. CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')
CVSSv2:
Base Score: HIGH (9.0) Vector: /AV:N/AC:L/Au:S/C:C/I:C/A:C CVSSv3:
Base Score: HIGH (8.8) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2018-1320 suppress
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete. CWE-295 Improper Certificate Validation
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-0205 suppress
In Apache Thrift all versions up to and including 0.12.0, a server or client may run into an endless loop when feed with specific input data. Because the issue had already been partially fixed in version 0.11.0, depending on the installed version it affects only certain language bindings. CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')
CVSSv2:
Base Score: HIGH (7.8) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:C CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-0210 suppress
In Apache Thrift 0.9.3 to 0.12.0, a server implemented in Go using TJSONProtocol or TSimpleJSONProtocol may panic when feed with invalid input data. CWE-125 Out-of-bounds Read
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-13949 suppress
In Apache Thrift 0.9.3 to 0.13.0, malicious RPC clients could send short messages which would result in a large memory allocation, potentially leading to denial of service. CWE-400 Uncontrolled Resource Consumption
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-11798 suppress
The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path. CWE-538 Insertion of Sensitive Information into Externally-Accessible File or Directory
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
The Apache Log4j Implementation License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-core/2.17.1/log4j-core-2.17.1.jar
MD5: 8d2f5c52700336dae846b2c3ecde7a6e
SHA1: 779f60f3844dadc3ef597976fcb1e5127b1f343d
SHA256: c967f223487980b9364e94a7c7f9a8a01fd3ee7c19bdbf0b0f9f8cb8511f3d41
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
log4j-core-2.17.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name log4j-core High Vendor jar package name apache Highest Vendor jar package name core Highest Vendor jar package name log4j Highest Vendor jar package name logging Highest Vendor jar package name org Highest Vendor Manifest automatic-module-name org.apache.logging.log4j.core Medium Vendor Manifest bundle-docurl https://www.apache.org/ Low Vendor Manifest bundle-symbolicname org.apache.logging.log4j.core Medium Vendor Manifest implementation-url https://logging.apache.org/log4j/2.x/log4j-core/ Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.logging.log4j Medium Vendor Manifest log4jreleasekey D7C92B70FA1C814D Low Vendor Manifest log4jreleasemanager Matt Sicker Low Vendor Manifest log4jsigningusername mattsicker@apache.org Medium Vendor Manifest multi-release true Low Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid log4j-core Highest Vendor pom artifactid log4j-core Low Vendor pom groupid org.apache.logging.log4j Highest Vendor pom name Apache Log4j Core High Vendor pom parent-artifactid log4j Low Product file name log4j-core High Product jar package name apache Highest Product jar package name core Highest Product jar package name log4j Highest Product jar package name logging Highest Product jar package name org Highest Product Manifest automatic-module-name org.apache.logging.log4j.core Medium Product Manifest bundle-docurl https://www.apache.org/ Low Product Manifest Bundle-Name Apache Log4j Core Medium Product Manifest bundle-symbolicname org.apache.logging.log4j.core Medium Product Manifest Implementation-Title Apache Log4j Core High Product Manifest implementation-url https://logging.apache.org/log4j/2.x/log4j-core/ Low Product Manifest log4jreleasekey D7C92B70FA1C814D Low Product Manifest log4jreleasemanager Matt Sicker Low Product Manifest log4jsigningusername mattsicker@apache.org Medium Product Manifest multi-release true Low Product Manifest specification-title Apache Log4j Core Medium Product pom artifactid log4j-core Highest Product pom groupid org.apache.logging.log4j Highest Product pom name Apache Log4j Core High Product pom parent-artifactid log4j Medium Version file version 2.17.1 High Version Manifest Bundle-Version 2.17.1 High Version Manifest Implementation-Version 2.17.1 High Version Manifest log4jreleaseversion 2.17.1 Medium Version pom version 2.17.1 Highest
Related Dependencies log4j-api-2.17.1.jarFile Path: /home/runner/.m2/repository/org/apache/logging/log4j/log4j-api/2.17.1/log4j-api-2.17.1.jar MD5: dfd5f2d81aba31583ee87fe16c7b78f8 SHA1: d771af8e336e372fb5399c99edabe0919aeaf5b2 SHA256: b0d8a4c8ab4fb8b1888d0095822703b0e6d4793c419550203da9e69196161de4 pkg:maven/org.apache.logging.log4j/log4j-api@2.17.1 Description:
logback-core module License:
http://www.eclipse.org/legal/epl-v10.html, http://www.gnu.org/licenses/old-licenses/lgpl-2.1.html File Path: /home/runner/.m2/repository/ch/qos/logback/logback-core/1.2.13/logback-core-1.2.13.jar
MD5: 25736944b46d10756764364afcb455fc
SHA1: 8ae4a32ed4937b5ebff6891a93c5e957f4e81655
SHA256: 07b1586faf220c05821d0f3ed8e2e417e214c83f40641f76e8a90b134c31ff6b
Referenced In Projects/Scopes: shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-logging-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-proxy-distribution:runtime shardingsphere-proxy-backend-core:compile logback-core-1.2.13.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/ch.qos.logback/logback-classic@1.2.13 pkg:maven/ch.qos.logback/logback-classic@1.2.13 pkg:maven/ch.qos.logback/logback-classic@1.2.13 pkg:maven/ch.qos.logback/logback-classic@1.2.13 pkg:maven/ch.qos.logback/logback-classic@1.2.13 pkg:maven/ch.qos.logback/logback-classic@1.2.13 pkg:maven/ch.qos.logback/logback-classic@1.2.13 Evidence Type Source Name Value Confidence Vendor file name logback-core High Vendor jar package name ch Highest Vendor jar package name core Highest Vendor jar package name logback Highest Vendor jar package name qos Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl http://www.qos.ch Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname ch.qos.logback.core Medium Vendor Manifest originally-created-by Apache Maven Bundle Plugin 5.1.4 Low Vendor pom artifactid logback-core Highest Vendor pom artifactid logback-core Low Vendor pom groupid ch.qos.logback Highest Vendor pom name Logback Core Module High Vendor pom parent-artifactid logback-parent Low Product file name logback-core High Product jar package name ch Highest Product jar package name core Highest Product jar package name logback Highest Product jar package name qos Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl http://www.qos.ch Low Product Manifest Bundle-Name Logback Core Module Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname ch.qos.logback.core Medium Product Manifest originally-created-by Apache Maven Bundle Plugin 5.1.4 Low Product pom artifactid logback-core Highest Product pom groupid ch.qos.logback Highest Product pom name Logback Core Module High Product pom parent-artifactid logback-parent Medium Version file version 1.2.13 High Version Manifest Bundle-Version 1.2.13 High Version pom version 1.2.13 Highest
Related Dependencies logback-classic-1.2.13.jarFile Path: /home/runner/.m2/repository/ch/qos/logback/logback-classic/1.2.13/logback-classic-1.2.13.jar MD5: fc49f9a98304889b228adbbd7288ae43 SHA1: e9f3458e7354fe4917081237c01fa4999f4e1b86 SHA256: 937afb220b91d8a394d78befdbf587c71aeed289d582e2a91e72a7d92172371d pkg:maven/ch.qos.logback/logback-classic@1.2.13 Description:
mchange-commons-java License:
GNU Lesser General Public License, Version 2.1: http://www.gnu.org/licenses/lgpl-2.1.html
Eclipse Public License, Version 1.0: http://www.eclipse.org/org/documents/epl-v10.html File Path: /home/runner/.m2/repository/com/mchange/mchange-commons-java/0.2.15/mchange-commons-java-0.2.15.jar
MD5: 97c4575d9d49d9afb71492e6bb4417da
SHA1: 6ef5abe5f1b94ac45b7b5bad42d871da4fda6bbc
SHA256: 2b8fce65e95a3e968d5ab3507e2833f43df3daee0635ee51c7ce33343bb3a21c
Referenced In Projects/Scopes: shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-agent-logging-file:provided shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile mchange-commons-java-0.2.15.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-schedule-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name mchange-commons-java High Vendor jar package name mchange Highest Vendor Manifest Implementation-Vendor com.mchange High Vendor Manifest Implementation-Vendor-Id com.mchange Medium Vendor Manifest specification-vendor com.mchange Low Vendor pom artifactid mchange-commons-java Highest Vendor pom artifactid mchange-commons-java Low Vendor pom developer email swaldman@mchange.com Low Vendor pom developer id swaldman Medium Vendor pom developer name Steve Waldman Medium Vendor pom groupid com.mchange Highest Vendor pom name mchange-commons-java High Vendor pom organization name com.mchange High Vendor pom url swaldman/mchange-commons-java Highest Product file name mchange-commons-java High Product jar package name mchange Highest Product Manifest Implementation-Title mchange-commons-java High Product Manifest specification-title mchange-commons-java Medium Product pom artifactid mchange-commons-java Highest Product pom developer email swaldman@mchange.com Low Product pom developer id swaldman Low Product pom developer name Steve Waldman Low Product pom groupid com.mchange Highest Product pom name mchange-commons-java High Product pom organization name com.mchange Low Product pom url swaldman/mchange-commons-java High Version file version 0.2.15 High Version Manifest Implementation-Version 0.2.15 High Version pom version 0.2.15 Highest
Description:
Mockito mock objects library core API and implementation License:
The MIT License: https://github.com/mockito/mockito/blob/main/LICENSE File Path: /home/runner/.m2/repository/org/mockito/mockito-core/4.11.0/mockito-core-4.11.0.jar
MD5: 9fe6ed240769c4e568ee331e0d850f90
SHA1: ce5226440c2ee78915716d4ce3d10aed2dbf26fb
SHA256: 4b909690cab288c761eb94c0bf0e814496cf3921d8affac84cd87774530351e5
Referenced In Projects/Scopes: shardingsphere-test-fixture-database:compile shardingsphere-test-it-parser:compile shardingsphere-test-fixture-infra:compile shardingsphere-test-util:compile mockito-core-4.11.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture-database@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-fixture-infra@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name mockito-core High Vendor jar package name and Highest Vendor jar package name api Highest Vendor jar package name mockito Highest Vendor Manifest automatic-module-name org.mockito Medium Vendor Manifest bundle-symbolicname org.mockito.mockito-core Medium Vendor pom artifactid mockito-core Highest Vendor pom artifactid mockito-core Low Vendor pom developer id bric3 Medium Vendor pom developer id mockitoguy Medium Vendor pom developer id raphw Medium Vendor pom developer id TimvdLippe Medium Vendor pom developer name Brice Dutheil Medium Vendor pom developer name Rafael Winterhalter Medium Vendor pom developer name Szczepan Faber Medium Vendor pom developer name Tim van der Lippe Medium Vendor pom groupid org.mockito Highest Vendor pom name mockito-core High Vendor pom url mockito/mockito Highest Product file name mockito-core High Product jar package name and Highest Product jar package name api Highest Product jar package name mockito Highest Product Manifest automatic-module-name org.mockito Medium Product Manifest Bundle-Name Mockito Mock Library for Java. Core bundle requires Byte Buddy and Objenesis. Medium Product Manifest bundle-symbolicname org.mockito.mockito-core Medium Product pom artifactid mockito-core Highest Product pom developer id bric3 Low Product pom developer id mockitoguy Low Product pom developer id raphw Low Product pom developer id TimvdLippe Low Product pom developer name Brice Dutheil Low Product pom developer name Rafael Winterhalter Low Product pom developer name Szczepan Faber Low Product pom developer name Tim van der Lippe Low Product pom groupid org.mockito Highest Product pom name mockito-core High Product pom url mockito/mockito High Version file version 4.11.0 High Version Manifest Bundle-Version 4.11.0 High Version pom version 4.11.0 Highest
Description:
Mockito JUnit 5 support License:
The MIT License: https://github.com/mockito/mockito/blob/main/LICENSE File Path: /home/runner/.m2/repository/org/mockito/mockito-junit-jupiter/4.11.0/mockito-junit-jupiter-4.11.0.jar
MD5: 2dd90ec41b6e41dde720ec6df2157acf
SHA1: 6a2a2d138141e9c003451292348173c899450872
SHA256: f4b3694f60fccc7b520d8aea9b6c827d8e9949b652cad09fce10b546bf3ac537
Referenced In Projects/Scopes: shardingsphere-test-it-parser:compile shardingsphere-test-util:compile mockito-junit-jupiter-4.11.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-util@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name mockito-junit-jupiter High Vendor jar package name junit Highest Vendor jar package name jupiter Highest Vendor jar package name mockito Highest Vendor Manifest automatic-module-name org.mockito.junit.jupiter Medium Vendor Manifest bundle-symbolicname org.mockito.junit-jupiter Medium Vendor pom artifactid mockito-junit-jupiter Highest Vendor pom artifactid mockito-junit-jupiter Low Vendor pom developer id bric3 Medium Vendor pom developer id mockitoguy Medium Vendor pom developer id raphw Medium Vendor pom developer id TimvdLippe Medium Vendor pom developer name Brice Dutheil Medium Vendor pom developer name Rafael Winterhalter Medium Vendor pom developer name Szczepan Faber Medium Vendor pom developer name Tim van der Lippe Medium Vendor pom groupid org.mockito Highest Vendor pom name mockito-junit-jupiter High Vendor pom url mockito/mockito Highest Product file name mockito-junit-jupiter High Product jar package name junit Highest Product jar package name jupiter Highest Product jar package name mockito Highest Product Manifest automatic-module-name org.mockito.junit.jupiter Medium Product Manifest Bundle-Name Mockito Extension Library for JUnit 5. Medium Product Manifest bundle-symbolicname org.mockito.junit-jupiter Medium Product pom artifactid mockito-junit-jupiter Highest Product pom developer id bric3 Low Product pom developer id mockitoguy Low Product pom developer id raphw Low Product pom developer id TimvdLippe Low Product pom developer name Brice Dutheil Low Product pom developer name Rafael Winterhalter Low Product pom developer name Szczepan Faber Low Product pom developer name Tim van der Lippe Low Product pom groupid org.mockito Highest Product pom name mockito-junit-jupiter High Product pom url mockito/mockito High Version file version 4.11.0 High Version Manifest Bundle-Version 4.11.0 High Version pom version 4.11.0 Highest
Description:
JDBC Type 4 driver for MySQL. License:
The GNU General Public License, v2 with Universal FOSS Exception, v1.0 File Path: /home/runner/.m2/repository/com/mysql/mysql-connector-j/8.3.0/mysql-connector-j-8.3.0.jar
MD5: 48d9e8892746315faf8023c1b26fd8bb
SHA1: 1cc7fa5d61f4bbc113531a4ba6d85d41cf3d57e1
SHA256: 94e7fa815370cdcefed915db7f53f88445fac110f8c3818392b992ec9ee6d295
Referenced In Projects/Scopes: shardingsphere-test-e2e-fixture:runtime shardingsphere-test-e2e-agent-plugins-zipkin:runtime shardingsphere-proxy-bootstrap:runtime shardingsphere-test-e2e-agent-plugins-jaeger:runtime shardingsphere-test-e2e-agent-plugins-metrics-prometheus:runtime shardingsphere-test-e2e-agent-jdbc-fixture:runtime shardingsphere-test-e2e-agent-plugins-logging-file:runtime mysql-connector-j-8.3.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name mysql-connector-j High Vendor hint analyzer vendor oracle Highest Vendor hint analyzer (hint) vendor sun Highest Vendor jar package name cj Highest Vendor jar package name driver Highest Vendor jar package name jdbc Highest Vendor jar package name mysql Highest Vendor jar package name type Highest Vendor Manifest bundle-symbolicname com.mysql.cj Medium Vendor Manifest Implementation-Vendor Oracle High Vendor Manifest Implementation-Vendor-Id com.mysql Medium Vendor Manifest specification-vendor Oracle Corporation Low Vendor Manifest (hint) Implementation-Vendor sun High Vendor pom artifactid mysql-connector-j Highest Vendor pom artifactid mysql-connector-j Low Vendor pom developer email filipe.silva@oracle.com Low Vendor pom developer name Filipe Silva Medium Vendor pom developer org Oracle Corporation Medium Vendor pom developer org URL https://www.oracle.com/ Medium Vendor pom groupid com.mysql Highest Vendor pom name MySQL Connector/J High Vendor pom organization name Oracle Corporation High Vendor pom organization url https://www.oracle.com/ Medium Vendor pom url http://dev.mysql.com/doc/connector-j/en/ Highest Product file name mysql-connector-j High Product hint analyzer product mysql_connector/j Highest Product hint analyzer product mysql_connector_j Highest Product hint analyzer product mysql_connectors Highest Product jar package name cj Highest Product jar package name driver Highest Product jar package name jdbc Highest Product jar package name mysql Highest Product jar package name type Highest Product jar package name xdevapi Highest Product Manifest Bundle-Name Oracle Corporation's JDBC and XDevAPI Driver for MySQL Medium Product Manifest bundle-symbolicname com.mysql.cj Medium Product Manifest Implementation-Title MySQL Connector/J High Product Manifest specification-title JDBC Medium Product pom artifactid mysql-connector-j Highest Product pom developer email filipe.silva@oracle.com Low Product pom developer name Filipe Silva Low Product pom developer org Oracle Corporation Low Product pom developer org URL https://www.oracle.com/ Low Product pom groupid com.mysql Highest Product pom name MySQL Connector/J High Product pom organization name Oracle Corporation Low Product pom organization url https://www.oracle.com/ Low Product pom url http://dev.mysql.com/doc/connector-j/en/ Medium Version file version 8.3.0 High Version Manifest Bundle-Version 8.3.0 High Version Manifest Implementation-Version 8.3.0 High Version pom version 8.3.0 Highest
Description:
Narayana: ArjunaJTS integration (atx) File Path: /home/runner/.m2/repository/org/jboss/narayana/jts/narayana-jts-integration/5.12.7.Final/narayana-jts-integration-5.12.7.Final.jarMD5: 8bd042889fdefff3c4d918e61545eff9SHA1: 25ca327ff95e77ba0623904b20d2056fc087c587SHA256: f5f795d4426d7b96abcb09d6871c15fde2d290ae9b1bde27cf69cd0305c3067eReferenced In Projects/Scopes:
shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-transaction-xa-narayana:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile narayana-jts-integration-5.12.7.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-narayana@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name narayana-jts-integration High Vendor jar package name jts Highest Vendor Manifest build-jdk-spec 11 Low Vendor Manifest implementation-url http://www.jboss.org/ Low Vendor Manifest Implementation-Vendor JBoss by Red Hat, Inc. High Vendor Manifest Implementation-Vendor-Id http://www.jboss.org/ Medium Vendor Manifest os-arch amd64 Low Vendor Manifest os-name Linux Medium Vendor Manifest specification-vendor JBoss by Red Hat Low Vendor pom artifactid narayana-jts-integration Highest Vendor pom artifactid narayana-jts-integration Low Vendor pom groupid org.jboss.narayana.jts Highest Vendor pom name Narayana: ArjunaJTS integration High Vendor pom parent-artifactid narayana-jts-all Low Product file name narayana-jts-integration High Product jar package name jts Highest Product Manifest build-jdk-spec 11 Low Product Manifest Implementation-Title Narayana: ArjunaJTS integration High Product Manifest implementation-url http://www.jboss.org/ Low Product Manifest os-arch amd64 Low Product Manifest os-name Linux Medium Product Manifest specification-title Narayana: ArjunaJTS integration Medium Product pom artifactid narayana-jts-integration Highest Product pom groupid org.jboss.narayana.jts Highest Product pom name Narayana: ArjunaJTS integration High Product pom parent-artifactid narayana-jts-all Medium Version Manifest Implementation-Version 5.12.7.Final High Version pom version 5.12.7.Final Highest
Description:
The Netty project is an effort to provide an asynchronous event-driven
network application framework and tools for rapid development of
maintainable high performance and high scalability protocol servers and
clients. In other words, Netty is a NIO client server framework which
enables quick and easy development of network applications such as protocol
servers and clients. It greatly simplifies and streamlines network
programming such as TCP and UDP socket server.
License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/io/netty/netty/3.10.5.Final/netty-3.10.5.Final.jar
MD5: 14466fef5f114f444c688f7977e9dbce
SHA1: 9ca7d55d246092bddd29b867706e2f6c7db701a0
SHA256: eb031acf8a00733481bcd60807925ecfc9ce3840f13823d4b96cdcb1132db1da
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
netty-3.10.5.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name netty High Vendor jar package name jboss Highest Vendor jar package name netty Highest Vendor Manifest bundle-buddypolicy registered Low Vendor Manifest bundle-docurl http://netty.io/ Low Vendor Manifest bundle-symbolicname org.jboss.netty Medium Vendor Manifest eclipse-buddypolicy registered Low Vendor pom artifactid netty Highest Vendor pom artifactid netty Low Vendor pom developer email netty@googlegroups.com Low Vendor pom developer id netty.io Medium Vendor pom developer name The Netty Project Contributors Medium Vendor pom developer org The Netty Project Medium Vendor pom developer org URL http://netty.io/ Medium Vendor pom groupid io.netty Highest Vendor pom name Netty High Vendor pom organization name The Netty Project High Vendor pom organization url http://netty.io/ Medium Vendor pom url http://netty.io/ Highest Product file name netty High Product jar package name jboss Highest Product jar package name netty Highest Product jar package name socket Highest Product Manifest bundle-buddypolicy registered Low Product Manifest bundle-docurl http://netty.io/ Low Product Manifest Bundle-Name Netty Medium Product Manifest bundle-symbolicname org.jboss.netty Medium Product Manifest eclipse-buddypolicy registered Low Product pom artifactid netty Highest Product pom developer email netty@googlegroups.com Low Product pom developer id netty.io Low Product pom developer name The Netty Project Contributors Low Product pom developer org The Netty Project Low Product pom developer org URL http://netty.io/ Low Product pom groupid io.netty Highest Product pom name Netty High Product pom organization name The Netty Project Low Product pom organization url http://netty.io/ Low Product pom url http://netty.io/ Medium Version Manifest Bundle-Version 3.10.5.Final High Version pom version 3.10.5.Final Highest
CVE-2019-20444 suppress
HttpObjectDecoder.java in Netty before 4.1.44 allows an HTTP header that lacks a colon, which might be interpreted as a separate header with an incorrect syntax, or might be interpreted as an "invalid fold." CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (6.4) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: CRITICAL (9.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-20445 suppress
HttpObjectDecoder.java in Netty before 4.1.44 allows a Content-Length header to be accompanied by a second Content-Length header, or by a Transfer-Encoding header. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (6.4) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: CRITICAL (9.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-16869 suppress
Netty before 4.1.42.Final mishandles whitespace before the colon in HTTP headers (such as a "Transfer-Encoding : chunked" line), which leads to HTTP request smuggling. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2020-11612 (OSSINDEX)suppress
netty-codec - Denial of Service (DoS) via Memory Exhaustion [CVE-2020-11612]
The product allocates memory based on an untrusted size value, but it does not validate or incorrectly validates the size, allowing arbitrary amounts of memory to be allocated.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2020-11612 for details CWE-789 Memory Allocation with Excessive Size Value
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:io.netty:netty:3.10.5.Final:*:*:*:*:*:*:* CVE-2021-37136 suppress
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack CWE-400 Uncontrolled Resource Consumption
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-37137 suppress
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can be triggered by supplying malicious input that decompresses to a very big size (via a network stream or a file) or by sending a huge skippable chunk. CWE-400 Uncontrolled Resource Consumption
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-41881 suppress
Netty project is an event-driven asynchronous network application framework. In versions prior to 4.1.86.Final, a StackOverflowError can be raised when parsing a malformed crafted message due to an infinite recursion. This issue is patched in version 4.1.86.Final. There is no workaround, except using a custom HaProxyMessageDecoder. CWE-674 Uncontrolled Recursion
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2021-43797 suppress
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead to HTTP request smuggling. Failing to do the validation might cause netty to "sanitize" header names before it forward these to another remote system when used as proxy. This remote system can't see the invalid usage anymore, and therefore does not do the validation itself. Users should upgrade to version 4.1.71.Final. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-34462 suppress
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. The `SniHandler` can allocate up to 16MB of heap for each channel during the TLS handshake. When the handler or the channel does not have an idle timeout, it can be used to make a TCP server using the `SniHandler` to allocate 16MB of heap. The `SniHandler` class is a handler that waits for the TLS handshake to configure a `SslHandler` according to the indicated server name by the `ClientHello` record. For this matter it allocates a `ByteBuf` using the value defined in the `ClientHello` record. Normally the value of the packet should be smaller than the handshake packet but there are not checks done here and the way the code is written, it is possible to craft a packet that makes the `SslClientHelloHandler`. This vulnerability has been fixed in version 4.1.94.Final. CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2021-21295 suppress
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling. In a proxy case, users may assume the content-length is validated somehow, which is not the case. If the request is forwarded to a backend channel that is a HTTP/1.1 connection, the Content-Length now has meaning and needs to be checked. An attacker can smuggle requests inside the body as it gets downgraded from HTTP/2 to HTTP/1.1. For an example attack refer to the linked GitHub Advisory. Users are only affected if all of this is true: `HTTP2MultiplexCodec` or `Http2FrameCodec` is used, `Http2StreamFrameToHttpObjectCodec` is used to convert to HTTP/1.1 objects, and these HTTP/1.1 objects are forwarded to another remote peer. This has been patched in 4.1.60.Final As a workaround, the user can do the validation by themselves by implementing a custom `ChannelInboundHandler` that is put in the `ChannelPipeline` behind `Http2StreamFrameToHttpObjectCodec`. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: LOW (2.6) Vector: /AV:N/AC:H/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-21409 suppress
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (5.9) Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N/E:2.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-21290 suppress
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method "File.createTempFile" on unix-like systems creates a random file, but, by default will create this file with the permissions "-rw-r--r--". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's "AbstractDiskHttpData" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own "java.io.tmpdir" when you start the JVM or use "DefaultHttpDataFactory.setBaseDir(...)" to set the directory to something that is only readable by the current user. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, CWE-668 Exposure of Resource to Wrong Sphere
CVSSv2:
Base Score: LOW (1.9) Vector: /AV:L/AC:M/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-24823 suppress
Netty is an open-source, asynchronous event-driven network application framework. The package `io.netty:netty-codec-http` prior to version 4.1.77.Final contains an insufficient fix for CVE-2021-21290. When Netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. This only impacts applications running on Java version 6 and lower. Additionally, this vulnerability impacts code running on Unix-like systems, and very old versions of Mac OSX and Windows as they all share the system temporary directory between all users. Version 4.1.77.Final contains a patch for this vulnerability. As a workaround, specify one's own `java.io.tmpdir` when starting the JVM or use DefaultHttpDataFactory.setBaseDir(...) to set the directory to something that is only readable by the current user. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, CWE-668 Exposure of Resource to Wrong Sphere
CVSSv2:
Base Score: LOW (1.9) Vector: /AV:L/AC:M/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.5) Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:1.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/io/netty/netty-codec-memcache/4.1.112.Final/netty-codec-memcache-4.1.112.Final.jar
MD5: bef6e34c47a3bbc31d91fc877c2bb1d2
SHA1: 16ac3a931897c8d685a248fcda4c5190dcc7d480
SHA256: fa7c14def7031add8fa4c5aed93748126290f426c8d133a692b1311c31b056a8
Referenced In Projects/Scopes: shardingsphere-infra-database-hive:provided shardingsphere-transaction-base-seata-at:provided netty-codec-memcache-4.1.112.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/io.seata/seata-all@2.0.0 Evidence Type Source Name Value Confidence Vendor file name netty-codec-memcache High Vendor jar package name codec Highest Vendor jar package name io Highest Vendor jar package name netty Highest Vendor Manifest automatic-module-name io.netty.codec.memcache Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-symbolicname io.netty.codec-memcache Medium Vendor Manifest implementation-url https://netty.io/netty-codec-memcache/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-codec-memcache Highest Vendor pom artifactid netty-codec-memcache Low Vendor pom groupid io.netty Highest Vendor pom name Netty/Codec/Memcache High Vendor pom parent-artifactid netty-parent Low Product file name netty-codec-memcache High Product jar package name codec Highest Product jar package name io Highest Product jar package name netty Highest Product Manifest automatic-module-name io.netty.codec.memcache Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/Codec/Memcache Medium Product Manifest bundle-symbolicname io.netty.codec-memcache Medium Product Manifest Implementation-Title Netty/Codec/Memcache High Product Manifest implementation-url https://netty.io/netty-codec-memcache/ Low Product Manifest specification-title Netty/Codec/Memcache Medium Product pom artifactid netty-codec-memcache Highest Product pom groupid io.netty Highest Product pom name Netty/Codec/Memcache High Product pom parent-artifactid netty-parent Medium Version Manifest Bundle-Version 4.1.112.Final High Version Manifest Implementation-Version 4.1.112.Final High Version pom version 4.1.112.Final Highest
Description:
Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers and clients. License:
https://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/io/netty/netty-codec-mqtt/4.1.112.Final/netty-codec-mqtt-4.1.112.Final.jar
MD5: e3a7be36ea01dad5eb73ab65ef5fa901
SHA1: 84b4d60de75a06983724d1593633be012feb8b37
SHA256: 870db37d9d32ce7f78180f3649e40f94e3b60902e98a5136ff9c3c8b24f71a0d
Referenced In Projects/Scopes: shardingsphere-infra-database-hive:provided shardingsphere-transaction-base-seata-at:provided netty-codec-mqtt-4.1.112.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/io.seata/seata-all@2.0.0 Evidence Type Source Name Value Confidence Vendor file name netty-codec-mqtt High Vendor jar package name codec Highest Vendor jar package name io Highest Vendor jar package name netty Highest Vendor Manifest automatic-module-name io.netty.codec.mqtt Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-symbolicname io.netty.codec-mqtt Medium Vendor Manifest implementation-url https://netty.io/netty-codec-mqtt/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-codec-mqtt Highest Vendor pom artifactid netty-codec-mqtt Low Vendor pom groupid io.netty Highest Vendor pom name Netty/Codec/MQTT High Vendor pom parent-artifactid netty-parent Low Product file name netty-codec-mqtt High Product jar package name codec Highest Product jar package name io Highest Product jar package name netty Highest Product Manifest automatic-module-name io.netty.codec.mqtt Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/Codec/MQTT Medium Product Manifest bundle-symbolicname io.netty.codec-mqtt Medium Product Manifest Implementation-Title Netty/Codec/MQTT High Product Manifest implementation-url https://netty.io/netty-codec-mqtt/ Low Product Manifest specification-title Netty/Codec/MQTT Medium Product pom artifactid netty-codec-mqtt Highest Product pom groupid io.netty Highest Product pom name Netty/Codec/MQTT High Product pom parent-artifactid netty-parent Medium Version Manifest Bundle-Version 4.1.112.Final High Version Manifest Implementation-Version 4.1.112.Final High Version pom version 4.1.112.Final Highest
Description:
Java Concurrency Tools Core Library License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/netty/netty-common/4.1.112.Final/netty-common-4.1.112.Final.jar/META-INF/maven/org.jctools/jctools-core/pom.xml
MD5: 5d5135397b920a7dcbca5c1fb0576cf2
SHA1: eaa05d6ad937464312a2681a3236c0e06602bbb7
SHA256: a69897b8ff0c2198b4b8cd7d4f93fde6d42b8e9dbfc95553585e27587b24e211
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-db-protocol-core:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-jdbc-distribution:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-transaction-base-seata-at:provided shardingsphere-postgresql-protocol:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-mysql-protocol:compile shardingsphere-data-pipeline-cdc-client:compile shardingsphere-opengauss-protocol:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-cluster-mode-repository-etcd:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile Evidence Type Source Name Value Confidence Vendor pom artifactid jctools-core Low Vendor pom groupid org.jctools Highest Vendor pom name Java Concurrency Tools Core Library High Vendor pom url JCTools Highest Product pom artifactid jctools-core Highest Product pom groupid org.jctools Highest Product pom name Java Concurrency Tools Core Library High Product pom url JCTools High Version pom version 4.0.5 Highest
Description:
A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
to BoringSSL and Apache APR.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-boringssl-static/2.0.65.Final/netty-tcnative-boringssl-static-2.0.65.Final-linux-aarch_64.jar
MD5: 7bce10691c85aa5d928e47e21772dbf2
SHA1: 70cff2bc010d0c047cf5b167b2c600e42f6863ab
SHA256: 9fd6f905bce8472ca9e24f8728962b91b9319c84fcbb618ab87f6b9774c063ed
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile netty-tcnative-boringssl-static-2.0.65.Final-linux-aarch_64.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-client@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.65.Final pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-test@5.7.0 Evidence Type Source Name Value Confidence Vendor file name netty-tcnative-boringssl-static High Vendor Manifest automatic-module-name io.netty.internal.tcnative.openssl.linux.aarch_64 Medium Vendor Manifest boringssl-branch chromium-stable Low Vendor Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-nativecode META-INF/native/libnetty_tcnative_linux_aarch_64.so;osname=linux;processor=x86_64 Low Vendor Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Vendor Manifest fragment-host io.netty.tcnative-classes Low Vendor Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-tcnative-boringssl-static Highest Vendor pom artifactid netty-tcnative-boringssl-static Low Vendor pom groupid io.netty Highest Vendor pom name Netty/TomcatNative [BoringSSL - Static] High Vendor pom parent-artifactid netty-tcnative-parent Low Product file name netty-tcnative-boringssl-static High Product Manifest automatic-module-name io.netty.internal.tcnative.openssl.linux.aarch_64 Medium Product Manifest boringssl-branch chromium-stable Low Product Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/TomcatNative [BoringSSL - Static] Medium Product Manifest bundle-nativecode META-INF/native/libnetty_tcnative_linux_aarch_64.so;osname=linux;processor=x86_64 Low Product Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Product Manifest fragment-host io.netty.tcnative-classes Low Product Manifest Implementation-Title Netty/TomcatNative [BoringSSL - Static] High Product Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Product Manifest specification-title Netty/TomcatNative [BoringSSL - Static] Medium Product pom artifactid netty-tcnative-boringssl-static Highest Product pom groupid io.netty Highest Product pom name Netty/TomcatNative [BoringSSL - Static] High Product pom parent-artifactid netty-tcnative-parent Medium Version Manifest Bundle-Version 2.0.65.Final High Version Manifest Implementation-Version 2.0.65.Final High Version pom version 2.0.65.Final Highest
Description:
A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
to BoringSSL and Apache APR.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-boringssl-static/2.0.65.Final/netty-tcnative-boringssl-static-2.0.65.Final-linux-x86_64.jar
MD5: c097810c73f8a5dd816a55b102918a88
SHA1: 6610ef4a025fcea2a5958724b9493a1b081b8f66
SHA256: 45ce55b49f4c16de65278d9f4608a9f06460f290f1e3b4fc3f2452866519d618
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile netty-tcnative-boringssl-static-2.0.65.Final-linux-x86_64.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.curator/curator-client@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-test@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.65.Final pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name netty-tcnative-boringssl-static High Vendor Manifest automatic-module-name io.netty.internal.tcnative.openssl.linux.x86_64 Medium Vendor Manifest boringssl-branch chromium-stable Low Vendor Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-nativecode META-INF/native/libnetty_tcnative_linux_x86_64.so;osname=linux;processor=x86_64 Low Vendor Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Vendor Manifest fragment-host io.netty.tcnative-classes Low Vendor Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-tcnative-boringssl-static Highest Vendor pom artifactid netty-tcnative-boringssl-static Low Vendor pom groupid io.netty Highest Vendor pom name Netty/TomcatNative [BoringSSL - Static] High Vendor pom parent-artifactid netty-tcnative-parent Low Product file name netty-tcnative-boringssl-static High Product Manifest automatic-module-name io.netty.internal.tcnative.openssl.linux.x86_64 Medium Product Manifest boringssl-branch chromium-stable Low Product Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/TomcatNative [BoringSSL - Static] Medium Product Manifest bundle-nativecode META-INF/native/libnetty_tcnative_linux_x86_64.so;osname=linux;processor=x86_64 Low Product Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Product Manifest fragment-host io.netty.tcnative-classes Low Product Manifest Implementation-Title Netty/TomcatNative [BoringSSL - Static] High Product Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Product Manifest specification-title Netty/TomcatNative [BoringSSL - Static] Medium Product pom artifactid netty-tcnative-boringssl-static Highest Product pom groupid io.netty Highest Product pom name Netty/TomcatNative [BoringSSL - Static] High Product pom parent-artifactid netty-tcnative-parent Medium Version Manifest Bundle-Version 2.0.65.Final High Version Manifest Implementation-Version 2.0.65.Final High Version pom version 2.0.65.Final Highest
Description:
A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
to BoringSSL and Apache APR.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-boringssl-static/2.0.65.Final/netty-tcnative-boringssl-static-2.0.65.Final-osx-aarch_64.jar
MD5: 4d4b4c0e979481e4590c957cf91b7aa0
SHA1: ca018bb3db661230fbf51bc2b3b1559ac7987040
SHA256: 834d3df2f9eb3aa08d49326409c454e2f9c75a49c3f0454b7cab64619b1614dc
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile netty-tcnative-boringssl-static-2.0.65.Final-osx-aarch_64.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.65.Final pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-test@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-client@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name netty-tcnative-boringssl-static High Vendor Manifest automatic-module-name io.netty.internal.tcnative.openssl.osx.aarch_64 Medium Vendor Manifest boringssl-branch chromium-stable Low Vendor Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-nativecode META-INF/native/libnetty_tcnative_osx_aarch_64.jnilib;osname=macosx;;processor=aarch64 Low Vendor Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Vendor Manifest fragment-host io.netty.tcnative-classes Low Vendor Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-tcnative-boringssl-static Highest Vendor pom artifactid netty-tcnative-boringssl-static Low Vendor pom groupid io.netty Highest Vendor pom name Netty/TomcatNative [BoringSSL - Static] High Vendor pom parent-artifactid netty-tcnative-parent Low Product file name netty-tcnative-boringssl-static High Product Manifest automatic-module-name io.netty.internal.tcnative.openssl.osx.aarch_64 Medium Product Manifest boringssl-branch chromium-stable Low Product Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/TomcatNative [BoringSSL - Static] Medium Product Manifest bundle-nativecode META-INF/native/libnetty_tcnative_osx_aarch_64.jnilib;osname=macosx;;processor=aarch64 Low Product Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Product Manifest fragment-host io.netty.tcnative-classes Low Product Manifest Implementation-Title Netty/TomcatNative [BoringSSL - Static] High Product Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Product Manifest specification-title Netty/TomcatNative [BoringSSL - Static] Medium Product pom artifactid netty-tcnative-boringssl-static Highest Product pom groupid io.netty Highest Product pom name Netty/TomcatNative [BoringSSL - Static] High Product pom parent-artifactid netty-tcnative-parent Medium Version Manifest Bundle-Version 2.0.65.Final High Version Manifest Implementation-Version 2.0.65.Final High Version pom version 2.0.65.Final Highest
Description:
A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
to BoringSSL and Apache APR.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-boringssl-static/2.0.65.Final/netty-tcnative-boringssl-static-2.0.65.Final-osx-x86_64.jar
MD5: c5d291beece6732a94cad76b3a94b028
SHA1: 313e89f2da215f0dcc54a638c5749c4ee959e74a
SHA256: 3a16b7ca4e891f9ad51e9ae9eb167c5e81d7f55a0001edf2471b693f4f8c12e1
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile netty-tcnative-boringssl-static-2.0.65.Final-osx-x86_64.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-client@5.7.0 pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.65.Final pkg:maven/org.apache.curator/curator-test@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name netty-tcnative-boringssl-static High Vendor Manifest automatic-module-name io.netty.internal.tcnative.openssl.osx.x86_64 Medium Vendor Manifest boringssl-branch chromium-stable Low Vendor Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-nativecode META-INF/native/libnetty_tcnative_osx_x86_64.jnilib;osname=macosx;;processor=x86_64 Low Vendor Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Vendor Manifest fragment-host io.netty.tcnative-classes Low Vendor Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-tcnative-boringssl-static Highest Vendor pom artifactid netty-tcnative-boringssl-static Low Vendor pom groupid io.netty Highest Vendor pom name Netty/TomcatNative [BoringSSL - Static] High Vendor pom parent-artifactid netty-tcnative-parent Low Product file name netty-tcnative-boringssl-static High Product Manifest automatic-module-name io.netty.internal.tcnative.openssl.osx.x86_64 Medium Product Manifest boringssl-branch chromium-stable Low Product Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/TomcatNative [BoringSSL - Static] Medium Product Manifest bundle-nativecode META-INF/native/libnetty_tcnative_osx_x86_64.jnilib;osname=macosx;;processor=x86_64 Low Product Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Product Manifest fragment-host io.netty.tcnative-classes Low Product Manifest Implementation-Title Netty/TomcatNative [BoringSSL - Static] High Product Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Product Manifest specification-title Netty/TomcatNative [BoringSSL - Static] Medium Product pom artifactid netty-tcnative-boringssl-static Highest Product pom groupid io.netty Highest Product pom name Netty/TomcatNative [BoringSSL - Static] High Product pom parent-artifactid netty-tcnative-parent Medium Version Manifest Bundle-Version 2.0.65.Final High Version Manifest Implementation-Version 2.0.65.Final High Version pom version 2.0.65.Final Highest
Description:
A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
to BoringSSL and Apache APR.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-boringssl-static/2.0.65.Final/netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar
MD5: 5a69b9d35f63a159d2a5d1db280f18fc
SHA1: c0dc8a542fd18d372a2ee67a203f2cfe0a345a05
SHA256: 855d930366fae9bec3872569975959e1e31dd752dffc9f925eae8436f933e11a
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-client@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-test@5.7.0 pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.65.Final pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name netty-tcnative-boringssl-static High Vendor Manifest automatic-module-name io.netty.internal.tcnative.openssl.windows.x86_64 Medium Vendor Manifest boringssl-branch chromium-stable Low Vendor Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-nativecode META-INF/native/netty_tcnative_windows_x86_64.dll;osname=win32;processor=x86_64 Low Vendor Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Vendor Manifest fragment-host io.netty.tcnative-classes Low Vendor Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-tcnative-boringssl-static Highest Vendor pom artifactid netty-tcnative-boringssl-static Low Vendor pom groupid io.netty Highest Vendor pom name Netty/TomcatNative [BoringSSL - Static] High Vendor pom parent-artifactid netty-tcnative-parent Low Product file name netty-tcnative-boringssl-static High Product Manifest automatic-module-name io.netty.internal.tcnative.openssl.windows.x86_64 Medium Product Manifest boringssl-branch chromium-stable Low Product Manifest boringssl-revision 1b7fdbd9101dedc3e0aa3fcf4ff74eacddb34ecc Low Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/TomcatNative [BoringSSL - Static] Medium Product Manifest bundle-nativecode META-INF/native/netty_tcnative_windows_x86_64.dll;osname=win32;processor=x86_64 Low Product Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Product Manifest fragment-host io.netty.tcnative-classes Low Product Manifest Implementation-Title Netty/TomcatNative [BoringSSL - Static] High Product Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Product Manifest specification-title Netty/TomcatNative [BoringSSL - Static] Medium Product pom artifactid netty-tcnative-boringssl-static Highest Product pom groupid io.netty Highest Product pom name Netty/TomcatNative [BoringSSL - Static] High Product pom parent-artifactid netty-tcnative-parent Medium Version Manifest Bundle-Version 2.0.65.Final High Version Manifest Implementation-Version 2.0.65.Final High Version pom version 2.0.65.Final Highest
File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-boringssl-static/2.0.65.Final/netty-tcnative-boringssl-static-2.0.65.Final-windows-x86_64.jar/META-INF/native/netty_tcnative_windows_x86_64.dllMD5: 6f554b64c567c0535d6a096e13ce49c3SHA1: 6e59246b154cafac113ff4b7208a3574eac47acdSHA256: 83e3077013cfd6b7c1e43a2802f83fe129a1218a1a4bfc0bd1359a7b3bdb132fReferenced In Projects/Scopes:
shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile Evidence Type Source Name Value Confidence Vendor file name netty_tcnative_windows_x86_64 High Product file name netty_tcnative_windows_x86_64 High
Description:
A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is statically linked
to BoringSSL and Apache APR. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-boringssl-static/2.0.65.Final/netty-tcnative-boringssl-static-2.0.65.Final.jar
MD5: 520e9bd6da5d9629d2d3fe2b2172bf64
SHA1: b31c6944d9cfd596b6c25fe17e36780bfa2d7473
SHA256: bb8349bda3ba043c09f5c732c5b2d47f18ac4dafce248cb850cfbd0599e5ba01
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile netty-tcnative-boringssl-static-2.0.65.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-test@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-client@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name netty-tcnative-boringssl-static High Vendor Manifest automatic-module-name io.netty.internal.tcnative.openssl.osx.aarch_64 Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Vendor Manifest fragment-host io.netty.tcnative-classes Low Vendor Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-tcnative-boringssl-static Highest Vendor pom artifactid netty-tcnative-boringssl-static Low Vendor pom developer email netty@googlegroups.com Low Vendor pom developer id netty.io Medium Vendor pom developer name The Netty Project Contributors Medium Vendor pom developer org The Netty Project Medium Vendor pom developer org URL https://netty.io/ Medium Vendor pom groupid io.netty Highest Vendor pom name Netty/TomcatNative [BoringSSL - Static] High Vendor pom url netty/netty-tcnative/netty-tcnative-boringssl-static/ Highest Product file name netty-tcnative-boringssl-static High Product Manifest automatic-module-name io.netty.internal.tcnative.openssl.osx.aarch_64 Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/TomcatNative [BoringSSL - Static] Medium Product Manifest bundle-symbolicname io.netty.tcnative-boringssl-static Medium Product Manifest fragment-host io.netty.tcnative-classes Low Product Manifest Implementation-Title Netty/TomcatNative [BoringSSL - Static] High Product Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/ Low Product Manifest specification-title Netty/TomcatNative [BoringSSL - Static] Medium Product pom artifactid netty-tcnative-boringssl-static Highest Product pom developer email netty@googlegroups.com Low Product pom developer id netty.io Low Product pom developer name The Netty Project Contributors Low Product pom developer org The Netty Project Low Product pom developer org URL https://netty.io/ Low Product pom groupid io.netty Highest Product pom name Netty/TomcatNative [BoringSSL - Static] High Product pom url netty/netty-tcnative/netty-tcnative-boringssl-static/ High Version Manifest Bundle-Version 2.0.65.Final High Version Manifest Implementation-Version 2.0.65.Final High Version pom version 2.0.65.Final Highest
Description:
A Mavenized fork of Tomcat Native which incorporates various patches. This artifact is dynamically linked
to OpenSSL and Apache APR.
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/netty/netty-tcnative-classes/2.0.65.Final/netty-tcnative-classes-2.0.65.Final.jar
MD5: 92eb12054f59826a3151064e74b8f554
SHA1: 3a7aecd4bcaf75c7b0b02c26ea6ceacf3e8f5f4d
SHA256: 84ef0241ada1b4ed92785e10c16edbeb063348959a3b0ef740712badd09fa128
Referenced In Projects/Scopes: shardingsphere-cluster-mode-repository-zookeeper:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-frontend-core:runtime shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-infra-database-hive:provided shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile netty-tcnative-classes-2.0.65.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3 pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-zookeeper@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-test@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.curator/curator-client@5.7.0 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/io.netty/netty-tcnative-boringssl-static@2.0.65.Final pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name netty-tcnative-classes High Vendor jar package name io Highest Vendor jar package name netty Highest Vendor jar package name tcnative Highest Vendor Manifest automatic-module-name io.netty.tcnative.classes.openssl Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://netty.io/ Low Vendor Manifest bundle-symbolicname io.netty.tcnative-classes Medium Vendor Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-classes/ Low Vendor Manifest Implementation-Vendor The Netty Project High Vendor Manifest Implementation-Vendor-Id io.netty Medium Vendor Manifest specification-vendor The Netty Project Low Vendor pom artifactid netty-tcnative-classes Highest Vendor pom artifactid netty-tcnative-classes Low Vendor pom groupid io.netty Highest Vendor pom name Netty/TomcatNative [OpenSSL - Classes] High Vendor pom parent-artifactid netty-tcnative-parent Low Product file name netty-tcnative-classes High Product jar package name io Highest Product jar package name netty Highest Product jar package name tcnative Highest Product Manifest automatic-module-name io.netty.tcnative.classes.openssl Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://netty.io/ Low Product Manifest Bundle-Name Netty/TomcatNative [OpenSSL - Classes] Medium Product Manifest bundle-symbolicname io.netty.tcnative-classes Medium Product Manifest Implementation-Title Netty/TomcatNative [OpenSSL - Classes] High Product Manifest implementation-url https://github.com/netty/netty-tcnative/netty-tcnative-classes/ Low Product Manifest specification-title Netty/TomcatNative [OpenSSL - Classes] Medium Product pom artifactid netty-tcnative-classes Highest Product pom groupid io.netty Highest Product pom name Netty/TomcatNative [OpenSSL - Classes] High Product pom parent-artifactid netty-tcnative-parent Medium Version Manifest Bundle-Version 2.0.65.Final High Version Manifest Implementation-Version 2.0.65.Final High Version pom version 2.0.65.Final Highest
Description:
Java library for Javascript Object Signing and Encryption (JOSE) and
JSON Web Tokens (JWT)
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/nimbusds/nimbus-jose-jwt/4.41.1/nimbus-jose-jwt-4.41.1.jar
MD5: f76e8b17905ac85ed41e9a2db92aea99
SHA1: 0290f3ff0035bb2f839c77ad8ec39466f31091a8
SHA256: fbfd0d5f2b2f86758b821daa5e79b5d7c965edd9dc1b2cc80b515df1c6ddc22d
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
nimbus-jose-jwt-4.41.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name nimbus-jose-jwt High Vendor jar package name jose Highest Vendor jar package name jwt Highest Vendor jar package name nimbusds Highest Vendor Manifest build-date ${timestamp} Low Vendor Manifest build-number ${buildNumber} Low Vendor Manifest build-tag 4.41.1 Low Vendor Manifest bundle-docurl http://connect2id.com Low Vendor Manifest bundle-symbolicname com.nimbusds.nimbus-jose-jwt Medium Vendor Manifest implementation-url https://bitbucket.org/connect2id/nimbus-jose-jwt Low Vendor Manifest Implementation-Vendor Connect2id Ltd. High Vendor Manifest Implementation-Vendor-Id com.nimbusds Medium Vendor Manifest specification-vendor Connect2id Ltd. Low Vendor pom artifactid nimbus-jose-jwt Highest Vendor pom artifactid nimbus-jose-jwt Low Vendor pom developer email vladimir@dzhuvinov.com Low Vendor pom developer id vdzhuvinov Medium Vendor pom developer name Vladimir Dzhuvinov Medium Vendor pom groupid com.nimbusds Highest Vendor pom name Nimbus JOSE+JWT High Vendor pom organization name Connect2id Ltd. High Vendor pom organization url http://connect2id.com Medium Vendor pom url https://bitbucket.org/connect2id/nimbus-jose-jwt Highest Product file name nimbus-jose-jwt High Product jar package name jose Highest Product jar package name jwt Highest Product jar package name nimbusds Highest Product Manifest build-date ${timestamp} Low Product Manifest build-number ${buildNumber} Low Product Manifest build-tag 4.41.1 Low Product Manifest bundle-docurl http://connect2id.com Low Product Manifest Bundle-Name Nimbus JOSE+JWT Medium Product Manifest bundle-symbolicname com.nimbusds.nimbus-jose-jwt Medium Product Manifest Implementation-Title Nimbus JOSE+JWT High Product Manifest implementation-url https://bitbucket.org/connect2id/nimbus-jose-jwt Low Product Manifest specification-title Nimbus JOSE+JWT Medium Product pom artifactid nimbus-jose-jwt Highest Product pom developer email vladimir@dzhuvinov.com Low Product pom developer id vdzhuvinov Low Product pom developer name Vladimir Dzhuvinov Low Product pom groupid com.nimbusds Highest Product pom name Nimbus JOSE+JWT High Product pom organization name Connect2id Ltd. Low Product pom organization url http://connect2id.com Low Product pom url https://bitbucket.org/connect2id/nimbus-jose-jwt Medium Version file version 4.41.1 High Version Manifest build-tag 4.41.1 Low Version Manifest Bundle-Version 4.41.1 High Version Manifest Implementation-Version 4.41.1 High Version pom version 4.41.1 Highest
CVE-2019-17195 suppress
Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass. CWE-755 Improper Handling of Exceptional Conditions
CVSSv2:
Base Score: MEDIUM (6.8) Vector: /AV:N/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-52428 (OSSINDEX)suppress
In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:com.nimbusds:nimbus-jose-jwt:4.41.1:*:*:*:*:*:*:* Description:
A library for instantiating Java objects License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/objenesis/objenesis/3.3/objenesis-3.3.jar
MD5: ab0e0b2ab81affdd7f38bcc60fd85571
SHA1: 1049c09f1de4331e8193e579448d0916d75b7631
SHA256: 02dfd0b0439a5591e35b708ed2f5474eb0948f53abf74637e959b8e4ef69bfeb
Referenced In Projects/Scopes: shardingsphere-test-util:runtime shardingsphere-test-it-parser:runtime shardingsphere-test-fixture-infra:runtime shardingsphere-test-fixture-database:runtime objenesis-3.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.mockito/mockito-core@4.11.0 pkg:maven/org.mockito/mockito-core@4.11.0 pkg:maven/org.mockito/mockito-core@4.11.0 pkg:maven/org.mockito/mockito-core@4.11.0 Evidence Type Source Name Value Confidence Vendor file name objenesis High Vendor jar package name objenesis Highest Vendor Manifest automatic-module-name org.objenesis Medium Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-symbolicname org.objenesis Medium Vendor Manifest Implementation-Vendor Joe Walnes, Henri Tremblay, Leonardo Mesquita High Vendor Manifest specification-vendor Joe Walnes, Henri Tremblay, Leonardo Mesquita Low Vendor pom artifactid objenesis Highest Vendor pom artifactid objenesis Low Vendor pom groupid org.objenesis Highest Vendor pom name Objenesis High Vendor pom parent-artifactid objenesis-parent Low Product file name objenesis High Product jar package name objenesis Highest Product Manifest automatic-module-name org.objenesis Medium Product Manifest build-jdk-spec 1.8 Low Product Manifest Bundle-Name Objenesis Medium Product Manifest bundle-symbolicname org.objenesis Medium Product Manifest Implementation-Title Objenesis High Product Manifest specification-title Objenesis Medium Product pom artifactid objenesis Highest Product pom groupid org.objenesis Highest Product pom name Objenesis High Product pom parent-artifactid objenesis-parent Medium Version file version 3.3 High Version Manifest Implementation-Version 3.3 High Version pom version 3.3 Highest
Description:
Square’s meticulous HTTP client for Java and Kotlin. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/squareup/okhttp3/okhttp/4.12.0/okhttp-4.12.0.jar
MD5: 6acba053af88fed87e710c6c29911d7c
SHA1: 2f4525d4a200e97e1b87449c2cd9bd2e25b7e8cd
SHA256: b1050081b14bb7a3a7e55a4d3ef01b5dcfabc453b4573a4fc019767191d5f4e0
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-agent-tracing-opentelemetry:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-distribution:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile okhttp-4.12.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name okhttp High Vendor jar package name http Highest Vendor jar package name okhttp Highest Vendor jar package name okhttp3 Highest Vendor Manifest automatic-module-name okhttp3 Medium Vendor pom artifactid okhttp Highest Vendor pom artifactid okhttp Low Vendor pom developer name Square, Inc. Medium Vendor pom groupid com.squareup.okhttp3 Highest Vendor pom name okhttp High Vendor pom url https://square.github.io/okhttp/ Highest Product file name okhttp High Product jar package name http Highest Product jar package name okhttp Highest Product jar package name okhttp3 Highest Product Manifest automatic-module-name okhttp3 Medium Product pom artifactid okhttp Highest Product pom developer name Square, Inc. Low Product pom groupid com.squareup.okhttp3 Highest Product pom name okhttp High Product pom url https://square.github.io/okhttp/ Medium Version file version 4.12.0 High Version pom version 4.12.0 Highest
Description:
A modern I/O library for Android, Java, and Kotlin Multiplatform. License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/squareup/okio/okio/3.6.0/okio-3.6.0.jar
MD5: 990f7b25bbd4fee8787ffabf89aa229f
SHA1: 8bf9683c80762d7dd47db12b68e99abea2a7ae05
SHA256: 8e63292e5c53bb93c4a6b0c213e79f15990fed250c1340f1c343880e1c9c39b5
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-agent-tracing-opentelemetry:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-agent-distribution:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile okio-3.6.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/com.squareup.okhttp3/okhttp@4.12.0 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name okio High Vendor pom artifactid okio Highest Vendor pom artifactid okio Low Vendor pom developer id square Medium Vendor pom developer name Square, Inc. Medium Vendor pom groupid com.squareup.okio Highest Vendor pom name okio High Vendor pom url square/okio/ Highest Product file name okio High Product pom artifactid okio Highest Product pom developer id square Low Product pom developer name Square, Inc. Low Product pom groupid com.squareup.okio Highest Product pom name okio High Product pom url square/okio/ High Version file version 3.6.0 High Version pom version 3.6.0 Highest
Related Dependencies okio-jvm-3.6.0.jarFile Path: /home/runner/.m2/repository/com/squareup/okio/okio-jvm/3.6.0/okio-jvm-3.6.0.jar MD5: 26370180ff99a7e8a12dcaac2a70cc6e SHA1: 5600569133b7bdefe1daf9ec7f4abeb6d13e1786 SHA256: 67543f0736fc422ae927ed0e504b98bc5e269fda0d3500579337cb713da28412 pkg:maven/com.squareup.okio/okio-jvm@3.6.0 Description:
Java JDBC driver for openGauss License:
BSD-2-Clause: https://jdbc.postgresql.org/about/license.html File Path: /home/runner/.m2/repository/org/opengauss/opengauss-jdbc/3.1.0-og/opengauss-jdbc-3.1.0-og.jar
MD5: eda19ba765c933429299489099f8bac5
SHA1: b0a44b57414d3b922ed0200c56854c3cb3ddddee
SHA256: efeea4ce6f5b404357b26fc598f8aec9957a3bf6831c982c41e5da980ff6a10e
Referenced In Projects/Scopes: shardingsphere-opengauss-protocol:provided shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-proxy-bootstrap:runtime shardingsphere-proxy-frontend-opengauss:provided shardingsphere-data-pipeline-opengauss:provided shardingsphere-proxy-distribution:runtime opengauss-jdbc-3.1.0-og.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-opengauss-protocol@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name opengauss-jdbc High Vendor jar package name driver Highest Vendor jar package name jdbc Highest Vendor jar package name opengauss Highest Vendor jar package name opengauss Low Vendor pom artifactid opengauss-jdbc Highest Vendor pom artifactid opengauss-jdbc Low Vendor pom groupid org.opengauss Highest Vendor pom name openGauss JDBC Driver High Vendor pom organization name openGauss High Vendor pom organization url https://opengauss.org/ Medium Vendor pom url https://gitee.com/opengauss/openGauss-connector-jdbc Highest Product file name opengauss-jdbc High Product jar package name driver Highest Product jar package name jdbc Highest Product jar package name opengauss Highest Product pom artifactid opengauss-jdbc Highest Product pom groupid org.opengauss Highest Product pom name openGauss JDBC Driver High Product pom organization name openGauss Low Product pom organization url https://opengauss.org/ Low Product pom url https://gitee.com/opengauss/openGauss-connector-jdbc Medium Version pom version 3.1.0-og Highest
Description:
OpenTelemetry API License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-api/1.31.0/opentelemetry-api-1.31.0.jar
MD5: 61fe8d718407efd06751a37511a8b108
SHA1: bb24a44d73484c681c236aed84fe6c28d17f30e2
SHA256: 7de2c7268850a9c1bae4401cf264febb871d811c6be8e5b3fb2cae52886e8ec1
Referenced In Projects/Scopes: shardingsphere-agent-tracing-opentelemetry:compile shardingsphere-agent-distribution:compile opentelemetry-api-1.31.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name opentelemetry-api High Vendor jar package name api Highest Vendor jar package name io Highest Vendor jar package name opentelemetry Highest Vendor Manifest automatic-module-name io.opentelemetry.api Medium Vendor pom artifactid opentelemetry-api Highest Vendor pom artifactid opentelemetry-api Low Vendor pom developer id opentelemetry Medium Vendor pom developer name OpenTelemetry Medium Vendor pom groupid io.opentelemetry Highest Vendor pom name OpenTelemetry Java High Vendor pom url open-telemetry/opentelemetry-java Highest Product file name opentelemetry-api High Product jar package name api Highest Product jar package name io Highest Product jar package name opentelemetry Highest Product Manifest automatic-module-name io.opentelemetry.api Medium Product Manifest Implementation-Title all High Product pom artifactid opentelemetry-api Highest Product pom developer id opentelemetry Low Product pom developer name OpenTelemetry Low Product pom groupid io.opentelemetry Highest Product pom name OpenTelemetry Java High Product pom url open-telemetry/opentelemetry-java High Version file version 1.31.0 High Version Manifest Implementation-Version 1.31.0 High Version pom version 1.31.0 Highest
Related Dependencies opentelemetry-context-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-context/1.31.0/opentelemetry-context-1.31.0.jar MD5: 17ba793f58aa9331f1e3b2a4ad1d11d1 SHA1: b8004737f7a970124e36ac71fde8eb88423e8cee SHA256: 664896a5c34bcda20c95c8f45198a95e8f97a1cd5e5c2923978f42dddada787d pkg:maven/io.opentelemetry/opentelemetry-context@1.31.0 opentelemetry-exporter-common-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-exporter-common/1.31.0/opentelemetry-exporter-common-1.31.0.jar MD5: d3baca592d1cfeadeaa29472f79a069f SHA1: b7b4baf5f9af72d5eb8a231dfb114ae31c57150d SHA256: d6b5ea600cfcf2a28598d72db5be79d1df7e6586e72d13d19e03dbd0ae19e2d7 pkg:maven/io.opentelemetry/opentelemetry-exporter-common@1.31.0 opentelemetry-exporter-jaeger-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-exporter-jaeger/1.31.0/opentelemetry-exporter-jaeger-1.31.0.jar MD5: d2bf12088b0885b18ebd567d66da807c SHA1: dbabe9c001ba5ae7593df90c583b5360cd3187da SHA256: 975519c288bd9aa00343143c1edc9fe3e268f3adf6730085488876ed7387133f pkg:maven/io.opentelemetry/opentelemetry-exporter-jaeger@1.31.0 opentelemetry-exporter-otlp-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-exporter-otlp/1.31.0/opentelemetry-exporter-otlp-1.31.0.jar MD5: fa545c2e9551678acf22d4a25ec92caa SHA1: b6454464425dfd81519070caeca3824558a2f1ae SHA256: fbbc27c414622d024f418f2267f0d4ce747ebeed5e47fef5a22bc9dfb1848a51 pkg:maven/io.opentelemetry/opentelemetry-exporter-otlp@1.31.0 opentelemetry-exporter-otlp-common-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-exporter-otlp-common/1.31.0/opentelemetry-exporter-otlp-common-1.31.0.jar MD5: e24e023c40b33b2114a0b549eda24668 SHA1: d8c22b6851bbc3dbf5d2387b9bde158ed5416ba4 SHA256: b13800f949159d7180a88cd19493c0a904f9e4142b1631c27255fecd5f194a01 pkg:maven/io.opentelemetry/opentelemetry-exporter-otlp-common@1.31.0 opentelemetry-exporter-sender-okhttp-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-exporter-sender-okhttp/1.31.0/opentelemetry-exporter-sender-okhttp-1.31.0.jar MD5: d18cd1591f800a8874e2810efc32fec1 SHA1: dd209381d58cfe81a989e29c9ca26d97c8dabd7a SHA256: e46f8ebaa40ebbe76fbfacde659f42742ead8d5ae3bdcfb0f25c5b170e6b4594 pkg:maven/io.opentelemetry/opentelemetry-exporter-sender-okhttp@1.31.0 opentelemetry-exporter-zipkin-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-exporter-zipkin/1.31.0/opentelemetry-exporter-zipkin-1.31.0.jar MD5: cf78a5f47beb4e87bd724dfd35272ecd SHA1: eabce38bfb5e47ce494a9d559374b0f52d704056 SHA256: 6e3cd4439c4fcdf55c258cd59a765516a724695a054320525e44f12001cbed85 pkg:maven/io.opentelemetry/opentelemetry-exporter-zipkin@1.31.0 opentelemetry-sdk-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-sdk/1.31.0/opentelemetry-sdk-1.31.0.jar MD5: 16665c80b76a3a26c93077f49a20f9ba SHA1: 2b2093be08a09ac536292bf6cecf8129cc7fb191 SHA256: b25354f3a3027d3007dea126dd920f7ff82130c32bd5d90094931a59a70de569 pkg:maven/io.opentelemetry/opentelemetry-sdk@1.31.0 opentelemetry-sdk-common-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-sdk-common/1.31.0/opentelemetry-sdk-common-1.31.0.jar MD5: 6d045b1e3e5f63622e1d301f5efab917 SHA1: f492528288236e097e12fc1c45963dd82c70d33c SHA256: a06bbe896838fd95c1fac5488ca4bc2aeb6a20aaba04fb171aee9e11400639ba pkg:maven/io.opentelemetry/opentelemetry-sdk-common@1.31.0 opentelemetry-sdk-extension-autoconfigure-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-sdk-extension-autoconfigure/1.31.0/opentelemetry-sdk-extension-autoconfigure-1.31.0.jar MD5: bbc29137ec5b1c3e2dd6b7503bff243e SHA1: 178efb4a6102afa581307038f609324ed4418025 SHA256: 819a6c5824b01b6f2d2abe590a917a892ee91380778ea4b4673d80f35d9cd902 pkg:maven/io.opentelemetry/opentelemetry-sdk-extension-autoconfigure@1.31.0 opentelemetry-sdk-extension-autoconfigure-spi-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-sdk-extension-autoconfigure-spi/1.31.0/opentelemetry-sdk-extension-autoconfigure-spi-1.31.0.jar MD5: ae24dae654d97175c72b752f8c652779 SHA1: 80acc40893fd00b56eee2acd145dbbd560173265 SHA256: e512ca9b23005bf9b8a147487bbbaaf87a8957e642a3330984214ae0dab550fc pkg:maven/io.opentelemetry/opentelemetry-sdk-extension-autoconfigure-spi@1.31.0 opentelemetry-sdk-logs-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-sdk-logs/1.31.0/opentelemetry-sdk-logs-1.31.0.jar MD5: 418e9f799c99be3fb591b3cf739d0ed8 SHA1: a63a203d3dc6f8875f8c26b9e3b522dc9a3f6280 SHA256: dab93a074f5a8eae03a7c4984aa90ba0d3f2cc8b015e061b585d820c3d0151d2 pkg:maven/io.opentelemetry/opentelemetry-sdk-logs@1.31.0 opentelemetry-sdk-metrics-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-sdk-metrics/1.31.0/opentelemetry-sdk-metrics-1.31.0.jar MD5: c1e78280a4fe266e94daa5a7b68bc0ab SHA1: 47cc23762fae728d68e4fda1dfb71986ae0b8b3e SHA256: 641b2ff8a9871f167f007be87bb0d4d66da5e0e8e1373698b3b08782285e4860 pkg:maven/io.opentelemetry/opentelemetry-sdk-metrics@1.31.0 opentelemetry-sdk-trace-1.31.0.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-sdk-trace/1.31.0/opentelemetry-sdk-trace-1.31.0.jar MD5: 395890d991931c195bacd0d97ad0b713 SHA1: a3941197cfb8ae9eb9e482073480c0c3918b746c SHA256: e78062c470400d6d5e0566fd24e1e048c874fa27a555c0d2b36ad0294af85cab pkg:maven/io.opentelemetry/opentelemetry-sdk-trace@1.31.0 Description:
OpenTelemetry Events API License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-api-events/1.31.0-alpha/opentelemetry-api-events-1.31.0-alpha.jar
MD5: f011ae1a6fb137b91def6729d11877bd
SHA1: 537183c5cd8fa7ebf520c0887c4ffb8a450913fe
SHA256: 64637b7b3b0f45ed73e4f008efcb8117d40b4fc1174e9b2d320ec0b2e4657c86
Referenced In Projects/Scopes: shardingsphere-agent-distribution:runtime shardingsphere-agent-tracing-opentelemetry:runtime opentelemetry-api-events-1.31.0-alpha.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/io.opentelemetry/opentelemetry-sdk-extension-autoconfigure@1.31.0 Evidence Type Source Name Value Confidence Vendor file name opentelemetry-api-events High Vendor jar package name api Highest Vendor jar package name events Highest Vendor jar package name io Highest Vendor jar package name opentelemetry Highest Vendor Manifest automatic-module-name io.opentelemetry.api.events Medium Vendor pom artifactid opentelemetry-api-events Highest Vendor pom artifactid opentelemetry-api-events Low Vendor pom developer id opentelemetry Medium Vendor pom developer name OpenTelemetry Medium Vendor pom groupid io.opentelemetry Highest Vendor pom name OpenTelemetry Java High Vendor pom url open-telemetry/opentelemetry-java Highest Product file name opentelemetry-api-events High Product jar package name api Highest Product jar package name events Highest Product jar package name io Highest Product jar package name opentelemetry Highest Product Manifest automatic-module-name io.opentelemetry.api.events Medium Product Manifest Implementation-Title events High Product pom artifactid opentelemetry-api-events Highest Product pom developer id opentelemetry Low Product pom developer name OpenTelemetry Low Product pom groupid io.opentelemetry Highest Product pom name OpenTelemetry Java High Product pom url open-telemetry/opentelemetry-java High Version Manifest Implementation-Version 1.31.0-alpha High Version pom version 1.31.0-alpha Highest
Related Dependencies opentelemetry-extension-incubator-1.31.0-alpha.jarFile Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-extension-incubator/1.31.0-alpha/opentelemetry-extension-incubator-1.31.0-alpha.jar MD5: bf6b39452324bc7f08754fe1b915a0f9 SHA1: 6c9f5c063309d92b6dd28bff0667f54b63afd36f SHA256: 098a9596819709ac613ce2d72ea8ef5562fd27694372a59eb4fb4591a6a7fbf8 pkg:maven/io.opentelemetry/opentelemetry-extension-incubator@1.31.0-alpha Description:
Java Concurrency Tools Core Library License:
Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/opentelemetry/opentelemetry-sdk-trace/1.31.0/opentelemetry-sdk-trace-1.31.0.jar/META-INF/maven/org.jctools/jctools-core/pom.xml
MD5: 7fb9d1854b8d9edeeb390b2f96c20139
SHA1: 36438c3a559a6df49dcae1401fdfca72f4e3d615
SHA256: 5497e5733a07eb6b0fa5eba326f8bc831f96a601fadde388cab58c63d139b45f
Referenced In Projects/Scopes: shardingsphere-agent-tracing-opentelemetry:compile shardingsphere-agent-distribution:compile Evidence Type Source Name Value Confidence Vendor pom artifactid jctools-core Low Vendor pom groupid org.jctools Highest Vendor pom name Java Concurrency Tools Core Library High Vendor pom url JCTools Highest Product pom artifactid jctools-core Highest Product pom groupid org.jctools Highest Product pom name Java Concurrency Tools Core Library High Product pom url JCTools High Version pom version 4.0.1 Highest
Description:
Open Test Alliance for the JVM License:
The Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/opentest4j/opentest4j/1.3.0/opentest4j-1.3.0.jar
MD5: 03c404f727531f3fd3b4c73997899327
SHA1: 152ea56b3a72f655d4fd677fc0ef2596c3dd5e6e
SHA256: 48e2df636cab6563ced64dcdff8abb2355627cb236ef0bf37598682ddf742f1b
Referenced In Projects/Scopes: shardingsphere-test-it-parser:compile shardingsphere-test-util:compile shardingsphere-test-it-yaml:compile opentest4j-1.3.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 pkg:maven/org.junit.jupiter/junit-jupiter-api@5.10.3 Evidence Type Source Name Value Confidence Vendor file name opentest4j High Vendor jar package name opentest4j Highest Vendor Manifest build-date 2023-07-06 Low Vendor Manifest build-revision 214973bfa4e7e9be7d04e623202cc4147c7036d2 Low Vendor Manifest build-time 14:25:06.116+0200 Low Vendor Manifest bundle-symbolicname org.opentest4j Medium Vendor Manifest Implementation-Vendor opentest4j.org High Vendor Manifest specification-vendor opentest4j.org Low Vendor pom artifactid opentest4j Highest Vendor pom artifactid opentest4j Low Vendor pom developer email business@johanneslink.net Low Vendor pom developer email mail@marcphilipp.de Low Vendor pom developer email matthias.merdes@heidelpay.com Low Vendor pom developer email sam@sambrannen.com Low Vendor pom developer email stefan.bechtold@me.com Low Vendor pom developer id bechte Medium Vendor pom developer id jlink Medium Vendor pom developer id marcphilipp Medium Vendor pom developer id mmerdes Medium Vendor pom developer id sbrannen Medium Vendor pom developer name Johannes Link Medium Vendor pom developer name Marc Philipp Medium Vendor pom developer name Matthias Merdes Medium Vendor pom developer name Sam Brannen Medium Vendor pom developer name Stefan Bechtold Medium Vendor pom groupid org.opentest4j Highest Vendor pom name org.opentest4j:opentest4j High Vendor pom url ota4j-team/opentest4j Highest Product file name opentest4j High Product jar package name opentest4j Highest Product Manifest build-date 2023-07-06 Low Product Manifest build-revision 214973bfa4e7e9be7d04e623202cc4147c7036d2 Low Product Manifest build-time 14:25:06.116+0200 Low Product Manifest Bundle-Name opentest4j Medium Product Manifest bundle-symbolicname org.opentest4j Medium Product Manifest Implementation-Title opentest4j High Product Manifest specification-title opentest4j Medium Product pom artifactid opentest4j Highest Product pom developer email business@johanneslink.net Low Product pom developer email mail@marcphilipp.de Low Product pom developer email matthias.merdes@heidelpay.com Low Product pom developer email sam@sambrannen.com Low Product pom developer email stefan.bechtold@me.com Low Product pom developer id bechte Low Product pom developer id jlink Low Product pom developer id marcphilipp Low Product pom developer id mmerdes Low Product pom developer id sbrannen Low Product pom developer name Johannes Link Low Product pom developer name Marc Philipp Low Product pom developer name Matthias Merdes Low Product pom developer name Sam Brannen Low Product pom developer name Stefan Bechtold Low Product pom groupid org.opentest4j Highest Product pom name org.opentest4j:opentest4j High Product pom url ota4j-team/opentest4j High Version file version 1.3.0 High Version Manifest Bundle-Version 1.3.0 High Version Manifest Implementation-Version 1.3.0 High Version pom version 1.3.0 Highest
Description:
Efficient and customizable TreeLayout Algorithm in Java. License:
BSD 3-Clause "New" or "Revised" License (BSD-3-Clause): http://www.abego-software.de/legal/apl-v10.html File Path: /home/runner/.m2/repository/org/abego/treelayout/org.abego.treelayout.core/1.0.3/org.abego.treelayout.core-1.0.3.jar
MD5: 9c8cefab6360a672565370d5311f0f3c
SHA1: 457216e8e6578099ae63667bb1e4439235892028
SHA256: fa5e31395c39c2e7d46aca0f81f72060931607b2fa41bd36038eb2cb6fb93326
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
org.abego.treelayout.core-1.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name org.abego.treelayout.core High Vendor jar package name abego Highest Vendor jar package name treelayout Highest Vendor Manifest bundle-docurl http://abego-software.de Low Vendor Manifest bundle-symbolicname org.abego.treelayout.core Medium Vendor Manifest Implementation-Vendor abego Software GmbH, Germany High Vendor Manifest Implementation-Vendor-Id org.abego.treelayout Medium Vendor Manifest specification-vendor abego Software GmbH, Germany Low Vendor pom artifactid abego.treelayout.core Low Vendor pom artifactid org.abego.treelayout.core Highest Vendor pom developer email ub@abego.org Low Vendor pom developer id ub Medium Vendor pom developer name Udo Borkowski Medium Vendor pom developer org abego Software GmbH, Germany Medium Vendor pom developer org URL http://abego-software.de Medium Vendor pom groupid org.abego.treelayout Highest Vendor pom name abego TreeLayout Core High Vendor pom organization name abego Software GmbH, Germany High Vendor pom organization url http://abego-software.de Medium Vendor pom url http://treelayout.sourceforge.net Highest Product file name org.abego.treelayout.core High Product jar package name abego Highest Product jar package name treelayout Highest Product Manifest bundle-docurl http://abego-software.de Low Product Manifest Bundle-Name abego TreeLayout Core Medium Product Manifest bundle-symbolicname org.abego.treelayout.core Medium Product Manifest Implementation-Title abego TreeLayout Core High Product Manifest specification-title abego TreeLayout Core Medium Product pom artifactid abego.treelayout.core Highest Product pom artifactid org.abego.treelayout.core Highest Product pom developer email ub@abego.org Low Product pom developer id ub Low Product pom developer name Udo Borkowski Low Product pom developer org abego Software GmbH, Germany Low Product pom developer org URL http://abego-software.de Low Product pom groupid org.abego.treelayout Highest Product pom name abego TreeLayout Core High Product pom organization name abego Software GmbH, Germany Low Product pom organization url http://abego-software.de Low Product pom url http://treelayout.sourceforge.net Medium Version file version 1.0.3 High Version Manifest Bundle-Version 1.0.3 High Version Manifest Implementation-Version 1.0.3 High Version pom version 1.0.3 Highest
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/agent/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-distribution shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-agent-tracing-core shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-core shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline org.apache.shardingsphere:shardingsphere-agent-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-agent-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-agent-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/agent/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-distribution shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-pipeline org.apache.shardingsphere:shardingsphere-agent-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-agent-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-agent-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/agent/plugins/logging/type/file/pom.xml
Referenced In Project/Scope: shardingsphere-agent-distribution
org.apache.shardingsphere:shardingsphere-agent-logging-file:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-distribution@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-agent-logging-file Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-agent-logging-file Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/agent/plugins/metrics/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-distribution shardingsphere-agent-metrics-prometheus org.apache.shardingsphere:shardingsphere-agent-metrics-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-distribution@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-agent-metrics-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-agent-metrics-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/agent/plugins/metrics/type/prometheus/pom.xml
Referenced In Project/Scope: shardingsphere-agent-distribution
org.apache.shardingsphere:shardingsphere-agent-metrics-prometheus:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-distribution@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-agent-metrics-prometheus Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-agent-metrics-prometheus Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/agent/plugins/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-plugin-tracing shardingsphere-agent-tracing-opentelemetry shardingsphere-agent-logging-type shardingsphere-agent-tracing-type shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-agent-plugin-metrics shardingsphere-agent-tracing-core shardingsphere-agent-logging-file shardingsphere-agent-metrics-type shardingsphere-agent-plugin-logging org.apache.shardingsphere:shardingsphere-agent-plugin-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-agent-plugin-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-agent-plugin-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/agent/plugins/tracing/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-distribution shardingsphere-agent-tracing-opentelemetry shardingsphere-agent-tracing-type org.apache.shardingsphere:shardingsphere-agent-tracing-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-distribution@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-agent-tracing-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-agent-tracing-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/agent/plugins/tracing/type/opentelemetry/pom.xml
Referenced In Project/Scope: shardingsphere-agent-distribution
org.apache.shardingsphere:shardingsphere-agent-tracing-opentelemetry:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-distribution@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-agent-tracing-opentelemetry Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-agent-tracing-opentelemetry Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/authority/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-authority-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-authority-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-authority-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/authority/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-authority-distsql-handler shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-authority-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-authority-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-authority-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-authority-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/authority/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-authority-distsql-parser shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-authority-distsql-handler shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-authority-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-authority-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-authority-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-authority-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-authority-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/broadcast/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-broadcast-core shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-broadcast-distsql-handler shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-broadcast-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-broadcast-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-broadcast-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-broadcast-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-broadcast-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/broadcast/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-broadcast-distsql-handler shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-broadcast-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-broadcast-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-broadcast-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-broadcast-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/broadcast/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-broadcast-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-broadcast-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-broadcast-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/broadcast/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-broadcast-distsql-handler shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-broadcast-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-broadcast-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-broadcast-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-broadcast-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/broadcast/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-broadcast-distsql-parser shardingsphere-proxy-bootstrap shardingsphere-broadcast-distsql-handler shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-broadcast-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-broadcast-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-broadcast-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-broadcast-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-broadcast-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/mode/type/cluster/repository/provider/etcd/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-proxy-distribution shardingsphere-test-e2e-agent-engine shardingsphere-jdbc-distribution shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-cluster-mode-repository-etcd:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-cluster-mode-repository-etcd Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-cluster-mode-repository-etcd Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/mode/type/cluster/repository/provider/zookeeper/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-data-pipeline-postgresql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-data-pipeline-cdc-core shardingsphere-data-pipeline-mysql shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-cluster-mode-repository-zookeeper:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-cluster-mode-repository-zookeeper Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-cluster-mode-repository-zookeeper Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-data-pipeline-postgresql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-data-pipeline-cdc-core shardingsphere-data-pipeline-mysql shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/scenario/cdc/client/pom.xml
Referenced In Project/Scope: shardingsphere-test-e2e-pipeline
org.apache.shardingsphere:shardingsphere-data-pipeline-cdc-client:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-cdc-client Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-cdc-client Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/scenario/cdc/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-cdc-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-cdc-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-cdc-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/scenario/cdc/protocol/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-data-pipeline-cdc-client shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-data-pipeline-cdc-core shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-cdc-protocol:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-client@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-cdc-protocol Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-cdc-protocol Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-data-pipeline-postgresql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-data-pipeline-cdc-core shardingsphere-data-pipeline-mysql shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-data-pipeline-distsql-parser shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-data-pipeline-scenario-migration shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/dialect/mysql/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-mysql:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-mysql Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-mysql Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/dialect/opengauss/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-opengauss:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-opengauss Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-opengauss Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/dialect/postgresql/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-postgresql:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-postgresql Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-postgresql Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/scenario/consistencycheck/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-scenario-consistencycheck:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-scenario-consistencycheck Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-scenario-consistencycheck Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/data-pipeline/scenario/migration/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-data-pipeline-scenario-migration:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-data-pipeline-scenario-migration Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-data-pipeline-scenario-migration Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/time-service/type/database/pom.xml
Referenced In Project/Scope: shardingsphere-jdbc-distribution
org.apache.shardingsphere:shardingsphere-database-time-service:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-database-time-service Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-database-time-service Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/db-protocol/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-data-pipeline-mysql shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-postgresql-protocol shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-mysql-protocol shardingsphere-opengauss-protocol shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-db-protocol-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-postgresql-protocol@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-opengauss-protocol@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mysql-protocol@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-db-protocol-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-db-protocol-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/encrypt/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-encrypt-core shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-encrypt-distsql-handler shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-encrypt-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-encrypt-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-encrypt-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-encrypt-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-encrypt-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/encrypt/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-encrypt-distsql-handler shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-encrypt-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-encrypt-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-encrypt-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-encrypt-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/encrypt/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-encrypt-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-encrypt-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-encrypt-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/encrypt/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-encrypt-distsql-handler shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-encrypt-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-encrypt-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-encrypt-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-encrypt-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/encrypt/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-encrypt-distsql-parser shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-encrypt-distsql-handler shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-encrypt-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-encrypt-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-encrypt-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-encrypt-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-encrypt-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/global-clock/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-global-clock-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-global-clock-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-global-clock-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/global-clock/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-global-clock-distsql-handler shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-global-clock-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-global-clock-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-global-clock-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-global-clock-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/global-clock/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-global-clock-distsql-handler shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-global-clock-distsql-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-global-clock-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-global-clock-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-global-clock-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-global-clock-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-global-clock-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/global-clock/type/tso/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-global-clock-tso-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-global-clock-tso-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-global-clock-tso-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/global-clock/type/tso/provider/redis/pom.xml
Referenced In Project/Scope: shardingsphere-global-clock-tso-core
org.apache.shardingsphere:shardingsphere-global-clock-tso-provider-redis:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-global-clock-tso-core@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-global-clock-tso-provider-redis Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-global-clock-tso-provider-redis Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/global-clock/type/tso/spi/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-global-clock-tso-provider-redis shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-global-clock-tso-core shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-global-clock-tso-spi:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-global-clock-tso-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-global-clock-tso-provider-redis@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-global-clock-tso-spi Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-global-clock-tso-spi Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/algorithm/load-balancer/type/random/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-readwrite-splitting-core shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-readwrite-splitting-distsql-handler shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-infra-algorithm-load-balancer-random:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-algorithm-load-balancer-random Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-algorithm-load-balancer-random Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/algorithm/load-balancer/type/round-robin/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-readwrite-splitting-core shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-readwrite-splitting-distsql-handler shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-infra-algorithm-load-balancer-round-robin:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-algorithm-load-balancer-round-robin Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-algorithm-load-balancer-round-robin Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/algorithm/load-balancer/type/weight/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-readwrite-splitting-core shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-readwrite-splitting-distsql-handler shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-infra-algorithm-load-balancer-weight:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-algorithm-load-balancer-weight Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-algorithm-load-balancer-weight Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/database/type/doris/pom.xml
Referenced In Project/Scope: shardingsphere-parser-sql-doris
org.apache.shardingsphere:shardingsphere-infra-database-doris:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-parser-sql-doris@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-database-doris Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-database-doris Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/database/type/presto/pom.xml
Referenced In Project/Scope: shardingsphere-parser-sql-presto
org.apache.shardingsphere:shardingsphere-infra-database-presto:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-parser-sql-presto@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-database-presto Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-database-presto Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/distsql-handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-sql-parser-distsql-handler shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-readwrite-splitting-distsql-handler shardingsphere-agent-tracing-core shardingsphere-transaction-distsql-handler shardingsphere-sql-federation-distsql-handler shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-broadcast-distsql-handler shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-global-clock-distsql-handler shardingsphere-sql-translator-distsql-handler shardingsphere-agent-plugins shardingsphere-single-distsql-handler shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-shadow-distsql-handler shardingsphere-sharding-distsql-handler shardingsphere-proxy-backend-core shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-authority-distsql-handler shardingsphere-mask-distsql-handler shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-encrypt-distsql-handler shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-infra-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-parser-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-translator-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sharding-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-shadow-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-authority-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mask-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-global-clock-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-broadcast-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-single-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-encrypt-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/reachability-metadata/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-infra-reachability-metadata:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-reachability-metadata Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-reachability-metadata Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/url/type/absolutepath/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-infra-url-absolutepath:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-url-absolutepath Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-url-absolutepath Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/url/type/classpath/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-infra-url-classpath:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-url-classpath Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-url-classpath Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/url/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-infra-url-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-infra-url-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-infra-url-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/jdbc/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-jdbc:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-jdbc Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-jdbc Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/logging/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-logging-core shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-logging-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-logging-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-logging-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-logging-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/logging/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-logging-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-logging-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-logging-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/mask/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-mask-core shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-mask-distsql-handler shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-mask-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mask-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mask-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-mask-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-mask-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/mask/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-mask-distsql-handler shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-mask-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mask-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-mask-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-mask-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/mask/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-mask-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-mask-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-mask-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/mask/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-mask-distsql-handler shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-mask-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mask-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-mask-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-mask-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/mask/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-mask-distsql-parser shardingsphere-mask-distsql-handler shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-mask-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mask-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mask-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-mask-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-mask-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/exception/dialect/type/mysql/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-data-pipeline-mysql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-mysql-protocol shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-mysql-dialect-exception:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-mysql-protocol@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-mysql-dialect-exception Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-mysql-dialect-exception Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/db-protocol/mysql/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-data-pipeline-mysql shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-mysql-protocol:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-mysql-protocol Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-mysql-protocol Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/db-protocol/opengauss/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-test-e2e-agent-engine shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-opengauss-protocol:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-opengauss-protocol Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-opengauss-protocol Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/parser/sql/dialect/mysql/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-parser-sql-mysql:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-parser-sql-mysql Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-parser-sql-mysql Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/parser/sql/dialect/opengauss/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-parser-sql-opengauss:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-parser-sql-opengauss Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-parser-sql-opengauss Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/parser/sql/dialect/oracle/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-parser-sql-oracle:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-parser-sql-oracle Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-parser-sql-oracle Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/parser/sql/dialect/postgresql/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-parser-sql-postgresql:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-parser-sql-postgresql Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-parser-sql-postgresql Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/parser/sql/dialect/sql92/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-parser-sql-sql92:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-parser-sql-sql92 Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-parser-sql-sql92 Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/parser/sql/dialect/sqlserver/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-parser-sql-sqlserver:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-parser-sql-sqlserver Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-parser-sql-sqlserver Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/infra/exception/dialect/type/postgresql/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-postgresql-protocol shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-opengauss-protocol shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-postgresql-dialect-exception:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-postgresql-protocol@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-opengauss-protocol@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-postgresql-dialect-exception Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-postgresql-dialect-exception Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/db-protocol/postgresql/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-test-e2e-agent-engine shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-opengauss-protocol shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-postgresql-protocol:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-opengauss-protocol@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-postgresql-protocol Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-postgresql-protocol Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/backend/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-proxy-backend-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-backend-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-backend-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/backend/type/mysql/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-proxy-backend-mysql:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-backend-mysql Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-backend-mysql Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/backend/type/opengauss/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-proxy-backend-opengauss:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-backend-opengauss Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-backend-opengauss Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/backend/type/postgresql/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-proxy-backend-postgresql:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-backend-postgresql Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-backend-postgresql Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/bootstrap/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-proxy-distribution shardingsphere-test-e2e-agent-engine shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-proxy-bootstrap:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-bootstrap Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-bootstrap Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/frontend/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-test-e2e-agent-engine shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-proxy-frontend-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-frontend-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-frontend-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/frontend/type/mysql/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-proxy-distribution shardingsphere-test-e2e-agent-engine shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-proxy-frontend-mysql:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-frontend-mysql Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-frontend-mysql Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/frontend/type/opengauss/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-proxy-distribution shardingsphere-test-e2e-agent-engine shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-proxy-frontend-opengauss:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-frontend-opengauss Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-frontend-opengauss Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/frontend/type/postgresql/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-test-e2e-agent-engine shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-proxy-frontend-postgresql:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-frontend-postgresql Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-frontend-postgresql Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/proxy/frontend/spi/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution org.apache.shardingsphere:shardingsphere-proxy-frontend-spi:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-proxy-frontend-spi Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-proxy-frontend-spi Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/readwrite-splitting/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-readwrite-splitting-core shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-readwrite-splitting-distsql-handler shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-readwrite-splitting-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-readwrite-splitting-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-readwrite-splitting-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/readwrite-splitting/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-readwrite-splitting-distsql-handler shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-readwrite-splitting-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-readwrite-splitting-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-readwrite-splitting-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/readwrite-splitting/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-readwrite-splitting-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-readwrite-splitting-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-readwrite-splitting-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/readwrite-splitting/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-readwrite-splitting-distsql-handler shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-readwrite-splitting-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-readwrite-splitting-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-readwrite-splitting-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/readwrite-splitting/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-readwrite-splitting-distsql-handler shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-readwrite-splitting-distsql-parser shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-readwrite-splitting-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-readwrite-splitting-distsql-handler@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-readwrite-splitting-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-readwrite-splitting-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/schedule/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-schedule-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-schedule-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-schedule-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/shadow/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-shadow-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-shadow-distsql-handler shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-shadow-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-shadow-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-shadow-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-shadow-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-shadow-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/shadow/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-shadow-distsql-handler shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-shadow-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-shadow-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-shadow-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-shadow-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/shadow/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-shadow-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-shadow-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-shadow-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/shadow/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-shadow-distsql-handler shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-shadow-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-shadow-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-shadow-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-shadow-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/shadow/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-shadow-distsql-handler shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-shadow-distsql-parser shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-shadow-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-shadow-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-shadow-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-shadow-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-shadow-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/sharding/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-data-pipeline-mysql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-sharding-distsql-handler shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sharding-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sharding-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sharding-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sharding-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/sharding/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sharding-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sharding-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sharding-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/sharding/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-sharding-distsql-handler shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sharding-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sharding-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sharding-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sharding-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/features/sharding/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-sharding-distsql-handler shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-sharding-distsql-parser shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sharding-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-sharding-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sharding-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sharding-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sharding-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/single/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-single-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-single-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-single-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/single/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-single-distsql-handler shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-single-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-single-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-single-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-single-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/single/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-single-distsql-handler shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-single-distsql-parser shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-single-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-single-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-single-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-single-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-single-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-federation/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-sql-federation-distsql-handler shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-federation-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-federation-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-federation-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-federation/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-federation-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-federation-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-federation-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-federation/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-sql-federation-distsql-handler shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-federation-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-federation-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-federation-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-federation/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-sql-federation-distsql-handler shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-sql-federation-distsql-parser shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-federation-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-federation-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-federation-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-federation-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-parser/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-parser-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-parser-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-parser-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-parser/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-sql-parser-distsql-handler shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-parser-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-parser-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-parser-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-parser-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-parser/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-sql-parser-distsql-handler shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-sql-parser-distsql-parser shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-parser-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-parser-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-parser-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-parser-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-parser-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-translator/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-translator-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-translator-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-translator-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-translator/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-sql-translator-distsql-handler shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-translator-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-translator-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-translator-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-translator-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/sql-translator/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-sql-translator-distsql-handler shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-sql-translator-distsql-parser shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-sql-translator-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-translator-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-sql-translator-distsql-parser@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-sql-translator-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-sql-translator-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/mode/type/standalone/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-standalone-mode-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-standalone-mode-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-standalone-mode-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/mode/type/standalone/repository/api/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-standalone-mode-repository-jdbc shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-standalone-mode-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-standalone-mode-repository-api:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-standalone-mode-repository-api Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-standalone-mode-repository-api Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/mode/type/standalone/repository/provider/jdbc/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-jdbc-distribution shardingsphere-agent-metrics-core shardingsphere-data-pipeline-distsql-handler shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-plugin-logging shardingsphere-agent-plugin-tracing shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-jdbc shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-test-it-pipeline shardingsphere-proxy-backend-postgresql shardingsphere-data-pipeline-opengauss shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-driver shardingsphere-proxy-bootstrap shardingsphere-data-pipeline-cdc-core shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-proxy-frontend-core shardingsphere-data-pipeline-core shardingsphere-data-pipeline-scenario-migration shardingsphere-proxy-native-distribution shardingsphere-test-e2e-fixture shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-data-pipeline-scenario-consistencycheck shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugins shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-data-pipeline-postgresql shardingsphere-proxy-backend-core shardingsphere-test-e2e-agent-jdbc-fixture shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-agent-plugin-metrics shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-standalone-mode-repository-jdbc:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-migration@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-jdbc-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-driver@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-cdc-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-standalone-mode-repository-jdbc Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-standalone-mode-repository-jdbc Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/test/e2e/agent/engine/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file org.apache.shardingsphere:shardingsphere-test-e2e-agent-engine:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-test-e2e-agent-engine Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-test-e2e-agent-engine Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/test/e2e/agent/fixture/proxy-fixture/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file org.apache.shardingsphere:shardingsphere-test-e2e-agent-proxy-fixture:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-test-e2e-agent-proxy-fixture Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-test-e2e-agent-proxy-fixture Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/test/e2e/env/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-pipeline org.apache.shardingsphere:shardingsphere-test-e2e-env:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-test-e2e-env Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-test-e2e-env Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/test/e2e/fixture/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-agent-engine shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-pipeline org.apache.shardingsphere:shardingsphere-test-e2e-fixture:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-test-e2e-fixture Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-test-e2e-fixture Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/test/it/parser/pom.xml
Referenced In Project/Scope: shardingsphere-test-it-optimizer
org.apache.shardingsphere:shardingsphere-test-it-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-test-it-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-test-it-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/test/util/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-it-parser shardingsphere-test-it-optimizer org.apache.shardingsphere:shardingsphere-test-util:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-test-util Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-test-util Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/transaction/type/base/seata-at/pom.xml
Referenced In Project/Scope: shardingsphere-jdbc-distribution
org.apache.shardingsphere:shardingsphere-transaction-base-seata-at:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-transaction-base-seata-at Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-transaction-base-seata-at Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/transaction/distsql/handler/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-transaction-distsql-handler:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-transaction-distsql-handler Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-transaction-distsql-handler Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/transaction/distsql/parser/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-transaction-distsql-handler shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-transaction-distsql-parser:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-transaction-distsql-parser Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-transaction-distsql-parser Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/transaction/distsql/statement/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-transaction-distsql-handler shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-transaction-distsql-parser shardingsphere-test-it-optimizer shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-test-it-parser shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-transaction-distsql-statement:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-distsql-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-optimizer@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-it-parser@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-distsql-handler@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-transaction-distsql-statement Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-transaction-distsql-statement Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/transaction/type/xa/provider/atomikos/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-transaction-xa-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-transaction-xa-atomikos:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-transaction-xa-atomikos Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-transaction-xa-atomikos Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/transaction/type/xa/core/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-transaction-xa-core:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-transaction-xa-core Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-transaction-xa-core Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/transaction/type/xa/provider/narayana/pom.xml
Referenced In Projects/Scopes: shardingsphere-test-e2e-transaction shardingsphere-test-e2e-fixture shardingsphere-test-e2e-agent-engine shardingsphere-jdbc-distribution shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-sql shardingsphere-test-e2e-showprocesslist shardingsphere-test-e2e-pipeline org.apache.shardingsphere:shardingsphere-transaction-xa-narayana:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-transaction-xa-narayana Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-transaction-xa-narayana Highest Product project groupid org.apache.shardingsphere Low
Description:
Build criterion and ecosystem above multi-model databases License:
Apache License 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/work/shardingsphere-doc/shardingsphere-doc/shardingsphere/kernel/transaction/type/xa/spi/pom.xml
Referenced In Projects/Scopes: shardingsphere-agent-logging-type shardingsphere-test-e2e-fixture shardingsphere-proxy-frontend-opengauss shardingsphere-proxy-distribution shardingsphere-agent-plugin-core shardingsphere-jdbc-distribution shardingsphere-agent-metrics-prometheus shardingsphere-agent-metrics-core shardingsphere-test-e2e-agent-plugins-metrics-prometheus shardingsphere-agent-logging-file shardingsphere-test-e2e-agent-plugins-logging-file shardingsphere-agent-plugin-logging shardingsphere-agent-plugins shardingsphere-agent-plugin-tracing shardingsphere-proxy-frontend-spi shardingsphere-agent-tracing-opentelemetry shardingsphere-test-e2e-sql shardingsphere-proxy-backend-mysql shardingsphere-proxy-frontend-mysql shardingsphere-agent-tracing-core shardingsphere-proxy-backend-core shardingsphere-transaction-xa-core shardingsphere-transaction-xa-narayana shardingsphere-proxy-backend-postgresql shardingsphere-test-e2e-transaction shardingsphere-transaction-xa-atomikos shardingsphere-test-e2e-agent-engine shardingsphere-proxy-bootstrap shardingsphere-test-e2e-agent-plugins-jaeger shardingsphere-proxy-frontend-postgresql shardingsphere-test-e2e-agent-plugins-zipkin shardingsphere-test-e2e-env shardingsphere-test-e2e-agent-proxy-fixture shardingsphere-test-e2e-showprocesslist shardingsphere-agent-tracing-type shardingsphere-agent-plugin-metrics shardingsphere-proxy-frontend-core shardingsphere-agent-metrics-type shardingsphere-test-e2e-pipeline shardingsphere-proxy-native-distribution shardingsphere-proxy-backend-opengauss org.apache.shardingsphere:shardingsphere-transaction-xa-spi:5.5.1-SNAPSHOT is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-logging@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-tracing@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-pipeline@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-logging-file@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-showprocesslist@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-proxy-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-metrics@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-jaeger@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugins@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-spi@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-type@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-narayana@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-plugins-zipkin@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-sql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-opengauss@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-plugin-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name pom High Vendor project artifactid shardingsphere-transaction-xa-spi Low Vendor project groupid org.apache.shardingsphere Highest Product file name pom High Product project artifactid shardingsphere-transaction-xa-spi Highest Product project groupid org.apache.shardingsphere Low
Description:
See http://wiki.glassfish.java.net/Wiki.jsp?page=JdkSpiOsgi for more information License:
https://glassfish.dev.java.net/nonav/public/CDDL+GPL.html File Path: /home/runner/.m2/repository/org/glassfish/hk2/osgi-resource-locator/1.0.1/osgi-resource-locator-1.0.1.jar
MD5: 51e70ad8fc9d1e9fb19debeb55555b75
SHA1: 4ed2b2d4738aed5786cfa64cba5a332779c4c708
SHA256: 775003be577e8806f51b6e442be1033d83be2cb2207227b349be0bf16e6c0843
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
osgi-resource-locator-1.0.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name osgi-resource-locator High Vendor jar package name glassfish Highest Vendor jar package name hk2 Highest Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-docurl https://glassfish.dev.java.net Low Vendor Manifest bundle-symbolicname org.glassfish.hk2.osgi-resource-locator Medium Vendor pom artifactid osgi-resource-locator Highest Vendor pom artifactid osgi-resource-locator Low Vendor pom developer id ss141213 Medium Vendor pom developer name Sahoo Medium Vendor pom developer org Sun Microsystems, Inc. Medium Vendor pom groupid org.glassfish.hk2 Highest Vendor pom name OSGi resource locator bundle - used by various API providers that rely on META-INF/services mechanism to locate providers. High Vendor pom parent-artifactid pom Low Vendor pom parent-groupid org.glassfish Medium Product file name osgi-resource-locator High Product jar package name glassfish Highest Product jar package name hk2 Highest Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-docurl https://glassfish.dev.java.net Low Product Manifest Bundle-Name OSGi resource locator bundle - used by various API providers that rely on META-INF/services mechanism to locate providers. Medium Product Manifest bundle-symbolicname org.glassfish.hk2.osgi-resource-locator Medium Product pom artifactid osgi-resource-locator Highest Product pom developer id ss141213 Low Product pom developer name Sahoo Low Product pom developer org Sun Microsystems, Inc. Low Product pom groupid org.glassfish.hk2 Highest Product pom name OSGi resource locator bundle - used by various API providers that rely on META-INF/services mechanism to locate providers. High Product pom parent-artifactid pom Medium Product pom parent-groupid org.glassfish Medium Version file version 1.0.1 High Version Manifest Bundle-Version 1.0.1 High Version pom parent-version 1.0.1 Low Version pom version 1.0.1 Highest
File Path: /home/runner/.m2/repository/com/thoughtworks/paranamer/paranamer/2.3/paranamer-2.3.jarMD5: e3060bebfe449abeb277e77c4c3388cbSHA1: 4a85963a752c0a2f715c3924bfc686865e7e1bc6SHA256: e93f50ae4d0de11080677f44ab268691266fed2b3ff7bc6fd97636febae7d8feReferenced In Project/Scope: shardingsphere-infra-database-hive:providedparanamer-2.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name paranamer High Vendor jar package name paranamer Highest Vendor jar package name paranamer Low Vendor jar package name thoughtworks Highest Vendor jar package name thoughtworks Low Vendor pom artifactid paranamer Highest Vendor pom artifactid paranamer Low Vendor pom groupid com.thoughtworks.paranamer Highest Vendor pom name ParaNamer Core High Vendor pom parent-artifactid paranamer-parent Low Product file name paranamer High Product jar package name paranamer Highest Product jar package name paranamer Low Product jar package name thoughtworks Highest Product pom artifactid paranamer Highest Product pom groupid com.thoughtworks.paranamer Highest Product pom name ParaNamer Core High Product pom parent-artifactid paranamer-parent Medium Version file version 2.3 High Version pom version 2.3 Highest
Description:
PerfMark API License:
Apache 2.0: https://opensource.org/licenses/Apache-2.0 File Path: /home/runner/.m2/repository/io/perfmark/perfmark-api/0.26.0/perfmark-api-0.26.0.jar
MD5: e80301eb310a53b2047e30db7964bce1
SHA1: ef65452adaf20bf7d12ef55913aba24037b82738
SHA256: b7d23e93a34537ce332708269a0d1404788a5b5e1949e82f5535fce51b3ea95b
Referenced In Projects/Scopes: shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-agent-plugins-zipkin:runtime shardingsphere-agent-metrics-core:provided shardingsphere-test-e2e-agent-plugins-metrics-prometheus:runtime shardingsphere-test-e2e-env:runtime shardingsphere-test-e2e-pipeline:runtime shardingsphere-agent-metrics-prometheus:provided shardingsphere-test-e2e-showprocesslist:runtime shardingsphere-test-e2e-agent-engine:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-jdbc-distribution:runtime shardingsphere-proxy-bootstrap:runtime shardingsphere-test-e2e-agent-plugins-jaeger:runtime shardingsphere-test-e2e-transaction:runtime shardingsphere-test-e2e-agent-proxy-fixture:runtime shardingsphere-cluster-mode-repository-etcd:runtime shardingsphere-test-e2e-sql:runtime shardingsphere-test-e2e-agent-plugins-logging-file:runtime shardingsphere-proxy-distribution:runtime perfmark-api-0.26.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/io.etcd/jetcd-core@0.7.7 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name perfmark-api High Vendor jar package name io Highest Vendor jar package name perfmark Highest Vendor Manifest automatic-module-name io.perfmark Medium Vendor Manifest carl-is-awesome true Low Vendor Manifest implementation-url https://www.perfmark.io/ Low Vendor Manifest Implementation-Vendor Carl Mastrangelo High Vendor pom artifactid perfmark-api Highest Vendor pom artifactid perfmark-api Low Vendor pom developer email carl@carlmastrangelo.com Low Vendor pom developer id carl-mastrangelo Medium Vendor pom developer name Carl Mastrangelo Medium Vendor pom groupid io.perfmark Highest Vendor pom name perfmark:perfmark-api High Vendor pom url perfmark/perfmark Highest Product file name perfmark-api High Product jar package name io Highest Product jar package name perfmark Highest Product Manifest automatic-module-name io.perfmark Medium Product Manifest carl-is-awesome true Low Product Manifest Implementation-Title PerfMark High Product Manifest implementation-url https://www.perfmark.io/ Low Product pom artifactid perfmark-api Highest Product pom developer email carl@carlmastrangelo.com Low Product pom developer id carl-mastrangelo Low Product pom developer name Carl Mastrangelo Low Product pom groupid io.perfmark Highest Product pom name perfmark:perfmark-api High Product pom url perfmark/perfmark High Version file version 0.26.0 High Version Manifest Implementation-Version 0.26.0 High Version pom version 0.26.0 Highest
Description:
PostgreSQL JDBC Driver Postgresql License:
BSD-2-Clause: https://jdbc.postgresql.org/about/license.html File Path: /home/runner/.m2/repository/org/postgresql/postgresql/42.7.2/postgresql-42.7.2.jar
MD5: bb897217989c97a463d8f571069d158a
SHA1: 86ed42574cd68662b05d3b00432a34e9a34cb12c
SHA256: 0c244ac7d02cf89d8e29852eace6595d75bc4d78581b85b2768460081646a57b
Referenced In Projects/Scopes: shardingsphere-proxy-native-distribution:runtime shardingsphere-test-e2e-fixture:runtime shardingsphere-proxy-frontend-postgresql:provided shardingsphere-data-pipeline-postgresql:provided shardingsphere-proxy-bootstrap:runtime shardingsphere-postgresql-protocol:compile shardingsphere-proxy-distribution:runtime shardingsphere-postgresql-dialect-exception:provided postgresql-42.7.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-native-distribution@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-postgresql-dialect-exception@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-postgresql-protocol@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name postgresql High Vendor jar package name driver Highest Vendor jar package name jdbc Highest Vendor jar package name postgresql Highest Vendor Manifest automatic-module-name org.postgresql.jdbc Medium Vendor Manifest bundle-copyright Copyright (c) 2003-2020, PostgreSQL Global Development Group Low Vendor Manifest bundle-docurl https://jdbc.postgresql.org/ Low Vendor Manifest bundle-symbolicname org.postgresql.jdbc Medium Vendor Manifest Implementation-Vendor PostgreSQL Global Development Group High Vendor Manifest Implementation-Vendor-Id org.postgresql Medium Vendor Manifest provide-capability osgi.service;effective:=active;objectClass="org.osgi.service.jdbc.DataSourceFactory";osgi.jdbc.driver.class="org.postgresql.Driver";osgi.jdbc.driver.name="PostgreSQL JDBC Driver" Low Vendor Manifest specification-vendor Oracle Corporation Low Vendor pom artifactid postgresql Highest Vendor pom artifactid postgresql Low Vendor pom developer id bokken Medium Vendor pom developer id davecramer Medium Vendor pom developer id jurka Medium Vendor pom developer id oliver Medium Vendor pom developer id ringerc Medium Vendor pom developer id vlsi Medium Vendor pom developer name Brett Okken Medium Vendor pom developer name Craig Ringer Medium Vendor pom developer name Dave Cramer Medium Vendor pom developer name Kris Jurka Medium Vendor pom developer name Oliver Jowett Medium Vendor pom developer name Vladimir Sitnikov Medium Vendor pom groupid org.postgresql Highest Vendor pom name PostgreSQL JDBC Driver High Vendor pom organization name PostgreSQL Global Development Group High Vendor pom organization url https://jdbc.postgresql.org/ Medium Vendor pom url https://jdbc.postgresql.org Highest Product file name postgresql High Product hint analyzer product pgjdbc Highest Product hint analyzer product postgresql_jdbc_driver Highest Product jar package name driver Highest Product jar package name jdbc Highest Product jar package name osgi Highest Product jar package name postgresql Highest Product Manifest automatic-module-name org.postgresql.jdbc Medium Product Manifest bundle-copyright Copyright (c) 2003-2020, PostgreSQL Global Development Group Low Product Manifest bundle-docurl https://jdbc.postgresql.org/ Low Product Manifest Bundle-Name PostgreSQL JDBC Driver Medium Product Manifest bundle-symbolicname org.postgresql.jdbc Medium Product Manifest Implementation-Title PostgreSQL JDBC Driver High Product Manifest provide-capability osgi.service;effective:=active;objectClass="org.osgi.service.jdbc.DataSourceFactory";osgi.jdbc.driver.class="org.postgresql.Driver";osgi.jdbc.driver.name="PostgreSQL JDBC Driver" Low Product Manifest specification-title JDBC Medium Product pom artifactid postgresql Highest Product pom developer id bokken Low Product pom developer id davecramer Low Product pom developer id jurka Low Product pom developer id oliver Low Product pom developer id ringerc Low Product pom developer id vlsi Low Product pom developer name Brett Okken Low Product pom developer name Craig Ringer Low Product pom developer name Dave Cramer Low Product pom developer name Kris Jurka Low Product pom developer name Oliver Jowett Low Product pom developer name Vladimir Sitnikov Low Product pom groupid org.postgresql Highest Product pom name PostgreSQL JDBC Driver High Product pom organization name PostgreSQL Global Development Group Low Product pom organization url https://jdbc.postgresql.org/ Low Product pom url https://jdbc.postgresql.org Medium Version file version 42.7.2 High Version Manifest Bundle-Version 42.7.2 High Version Manifest Implementation-Version 42.7.2 High Version pom version 42.7.2 Highest
File Path: /home/runner/.m2/repository/com/facebook/presto/presto-jdbc/0.282/presto-jdbc-0.282.jarMD5: c96a0da98580dac9721fe7e0a4baa6c4SHA1: 5b9f9309e1604f3e91e3445582d14d35bee94241SHA256: b37280970b2fc7d857b463b1beb74e94b891e71eaca2c5ce36865db932f3a81fReferenced In Project/Scope: shardingsphere-infra-database-presto:runtimepresto-jdbc-0.282.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name presto-jdbc High Vendor jar package name facebook Highest Vendor jar package name jdbc Highest Vendor jar package name presto Highest Vendor Manifest build-time 2023-06-10T05:21:01+0000 Low Vendor Manifest git-commit-id e1f2c2288d807c04b0ce8e50d5cb142102f01d96 Low Vendor Manifest Implementation-Vendor-Id com.facebook.presto Medium Vendor pom artifactid presto-jdbc Highest Vendor pom artifactid presto-jdbc Low Vendor pom groupid com.facebook.presto Highest Vendor pom name presto-jdbc High Vendor pom parent-artifactid presto-root Low Product file name presto-jdbc High Product jar package name facebook Highest Product jar package name jdbc Highest Product jar package name presto Highest Product Manifest build-time 2023-06-10T05:21:01+0000 Low Product Manifest git-commit-id e1f2c2288d807c04b0ce8e50d5cb142102f01d96 Low Product Manifest Implementation-Title presto-jdbc High Product Manifest specification-title presto-jdbc Medium Product pom artifactid presto-jdbc Highest Product pom groupid com.facebook.presto Highest Product pom name presto-jdbc High Product pom parent-artifactid presto-root Medium Version file version 0.282 High Version pom version 0.282 Highest
Description:
PROTO library for proto-google-common-protos License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/google/api/grpc/proto-google-common-protos/2.29.0/proto-google-common-protos-2.29.0.jar
MD5: c45ebcf545545422127310fa6feda22d
SHA1: eb1cf1cf4c12d5eb9cef958dfd76af4101c55a62
SHA256: ee9c751f06b112e92b37f75e4f73a17d03ef2c3302c6e8d986adbcc721b63cb0
Referenced In Projects/Scopes: shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-cluster-mode-repository-etcd:compile shardingsphere-jdbc-distribution:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-proxy-bootstrap:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile proto-google-common-protos-2.29.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/io.etcd/jetcd-core@0.7.7 pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-cluster-mode-repository-etcd@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name proto-google-common-protos High Vendor jar package name api Highest Vendor jar package name google Highest Vendor Manifest artifactid proto-google-common-protos Low Vendor Manifest build-jdk-spec 17 Low Vendor Manifest Implementation-Vendor Google LLC High Vendor Manifest specification-vendor Google LLC Low Vendor pom artifactid proto-google-common-protos Highest Vendor pom artifactid proto-google-common-protos Low Vendor pom developer email chingor@google.com Low Vendor pom developer id chingor Medium Vendor pom developer name Jeff Ching Medium Vendor pom developer org Google Medium Vendor pom groupid com.google.api.grpc Highest Vendor pom name proto-google-common-protos High Vendor pom organization name Google LLC High Vendor pom url googleapis/sdk-platform-java Highest Product file name proto-google-common-protos High Product jar package name api Highest Product jar package name google Highest Product Manifest artifactid proto-google-common-protos Low Product Manifest build-jdk-spec 17 Low Product Manifest Implementation-Title proto-google-common-protos High Product Manifest specification-title proto-google-common-protos Medium Product pom artifactid proto-google-common-protos Highest Product pom developer email chingor@google.com Low Product pom developer id chingor Low Product pom developer name Jeff Ching Low Product pom developer org Google Low Product pom groupid com.google.api.grpc Highest Product pom name proto-google-common-protos High Product pom organization name Google LLC Low Product pom url googleapis/sdk-platform-java High Version file version 2.29.0 High Version Manifest Implementation-Version 2.29.0 High Version Manifest version 2.29.0 Medium Version pom version 2.29.0 Highest
Description:
Enterprise Job Scheduler License:
http://www.apache.org/licenses/LICENSE-2.0.txt
Apache Software License, Version 2.0 File Path: /home/runner/.m2/repository/org/quartz-scheduler/quartz/2.3.2/quartz-2.3.2.jar
MD5: d7299dbaec0e0ed7af281b07cc40c8c1
SHA1: 18a6d6b5a40b77bd060b34cb9f2acadc4bae7c8a
SHA256: 639c6a675bc472e1568df9d8c954ff702da6f83ed27da0ff9a7bd12ed73b8bf0
Referenced In Projects/Scopes: shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-agent-logging-file:provided shardingsphere-data-pipeline-mysql:compile shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-schedule-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile quartz-2.3.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-schedule-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere.elasticjob/elasticjob-lite-core@3.0.4 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name quartz High Vendor hint analyzer vendor softwareag Highest Vendor jar package name job Highest Vendor jar package name quartz Highest Vendor jar package name scheduler Highest Vendor Manifest bundle-docurl http://www.terracotta.org Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Vendor Manifest bundle-symbolicname org.quartz-scheduler.quartz Medium Vendor Manifest terracotta-name quartz Medium Vendor Manifest terracotta-projectstatus Supported Low Vendor pom artifactid quartz Highest Vendor pom artifactid quartz Low Vendor pom groupid org.quartz-scheduler Highest Vendor pom name quartz High Vendor pom parent-artifactid quartz-parent Low Product file name quartz High Product jar package name job Highest Product jar package name quartz Highest Product jar package name scheduler Highest Product jar package name terracotta Highest Product Manifest bundle-docurl http://www.terracotta.org Low Product Manifest Bundle-Name quartz Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.6 Low Product Manifest bundle-symbolicname org.quartz-scheduler.quartz Medium Product Manifest terracotta-name quartz Medium Product Manifest terracotta-projectstatus Supported Low Product pom artifactid quartz Highest Product pom groupid org.quartz-scheduler Highest Product pom name quartz High Product pom parent-artifactid quartz-parent Medium Version file version 2.3.2 High Version Manifest Bundle-Version 2.3.2 High Version pom version 2.3.2 Highest
CVE-2023-39017 suppress
quartz-jobs 2.3.2 and below was discovered to contain a code injection vulnerability in the component org.quartz.jobs.ee.jms.SendQueueMessageJob.execute. This vulnerability is exploited via passing an unchecked argument. NOTE: this is disputed by multiple parties because it is not plausible that untrusted user input would reach the code location where injection must occur. CWE-94 Improper Control of Generation of Code ('Code Injection')
CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
Description:
Linear time regular expressions for Java License:
Go License: https://golang.org/LICENSE File Path: /home/runner/.m2/repository/com/google/re2j/re2j/1.7/re2j-1.7.jar
MD5: deb6ffa7ed6d2cc06e6ac1182755c735
SHA1: 2949632c1b4acce0d7784f28e3152e9cf3c2ec7a
SHA256: 4f657af51ab8bb0909bcc3eb40862d26125af8cbcf92aaaba595fed77f947bc0
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
re2j-1.7.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name re2j High Vendor jar package name google Highest Vendor jar package name google Low Vendor jar package name re2 Highest Vendor jar package name re2j Highest Vendor jar package name re2j Low Vendor pom artifactid re2j Highest Vendor pom artifactid re2j Low Vendor pom developer email re2j-discuss@googlegroups.com Low Vendor pom developer id dev Medium Vendor pom developer name The RE2/J Contributors Medium Vendor pom groupid com.google.re2j Highest Vendor pom name RE2/J High Vendor pom url http://github.com/google/re2j Highest Product file name re2j High Product jar package name google Highest Product jar package name re2 Highest Product jar package name re2j Highest Product jar package name re2j Low Product pom artifactid re2j Highest Product pom developer email re2j-discuss@googlegroups.com Low Product pom developer id dev Low Product pom developer name The RE2/J Contributors Low Product pom groupid com.google.re2j Highest Product pom name RE2/J High Product pom url http://github.com/google/re2j Medium Version file version 1.7 High Version pom version 1.7 Highest
Description:
Seata is an easy-to-use, high-performance, java based, open source distributed transaction solution. License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/io/seata/seata-all/2.0.0/seata-all-2.0.0.jar
MD5: 5955e1597ba483cb65f7229043115420
SHA1: e72725b1c714522b0323d980fdb1c1578560d7f1
SHA256: a18d83a51d4ba6a69848ad05366aa8b830610e77d18fcf284cb5b1285a831b75
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
seata-all-2.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-base-seata-at@5.5.1-SNAPSHOT
Evidence Type Source Name Value Confidence Vendor file name seata-all High Vendor jar package name io Highest Vendor jar package name seata Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest implementation-build 2023-11-20T16:10:58Z Low Vendor Manifest Implementation-Vendor Seata High Vendor Manifest specification-vendor Seata Low Vendor pom artifactid seata-all Highest Vendor pom artifactid seata-all Low Vendor pom developer email dev-seata@googlegroups.com Low Vendor pom developer id Seata Medium Vendor pom developer name Seata Medium Vendor pom groupid io.seata Highest Vendor pom name Seata All-in-one 2.0.0 High Vendor pom organization name Seata High Vendor pom organization url seata Medium Vendor pom url https://seata.io Highest Product file name seata-all High Product jar package name io Highest Product jar package name seata Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest implementation-build 2023-11-20T16:10:58Z Low Product Manifest Implementation-Title Seata All-in-one 2.0.0 High Product Manifest specification-title Seata All-in-one 2.0.0 Medium Product pom artifactid seata-all Highest Product pom developer email dev-seata@googlegroups.com Low Product pom developer id Seata Low Product pom developer name Seata Low Product pom groupid io.seata Highest Product pom name Seata All-in-one 2.0.0 High Product pom organization name Seata Low Product pom url https://seata.io Medium Product pom url seata High Version file version 2.0.0 High Version Manifest Implementation-Version 2.0.0 High Version pom version 2.0.0 Highest
Description:
Httpserver exposition for the simpleclient.
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/prometheus/simpleclient_httpserver/0.11.0/simpleclient_httpserver-0.11.0.jar
MD5: dea83a74d906512f523a5c881d8ee5ca
SHA1: a1ae6c343a41cc9afa95117ffade7ac26a18e01d
SHA256: de2c12b90c586425b6fcb9b9a716973b2e328b421a314230f16a3060eeaeb31a
Referenced In Projects/Scopes: shardingsphere-agent-metrics-prometheus:compile shardingsphere-agent-distribution:compile simpleclient_httpserver-0.11.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-agent-metrics-prometheus@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name simpleclient_httpserver High Vendor jar package name io Highest Vendor jar package name prometheus Highest Vendor Manifest bundle-symbolicname io.prometheus.simpleclient_httpserver Medium Vendor pom artifactid simpleclient_httpserver Highest Vendor pom artifactid simpleclient_httpserver Low Vendor pom developer email brian.brazil@robustperception.io Low Vendor pom developer id brian-brazil Medium Vendor pom developer name Brian Brazil Medium Vendor pom groupid io.prometheus Highest Vendor pom name Prometheus Java Simpleclient Httpserver High Vendor pom parent-artifactid parent Low Product file name simpleclient_httpserver High Product jar package name io Highest Product jar package name prometheus Highest Product Manifest Bundle-Name Prometheus Java Simpleclient Httpserver Medium Product Manifest bundle-symbolicname io.prometheus.simpleclient_httpserver Medium Product pom artifactid simpleclient_httpserver Highest Product pom developer email brian.brazil@robustperception.io Low Product pom developer id brian-brazil Low Product pom developer name Brian Brazil Low Product pom groupid io.prometheus Highest Product pom name Prometheus Java Simpleclient Httpserver High Product pom parent-artifactid parent Medium Version file version 0.11.0 High Version Manifest Bundle-Version 0.11.0 High Version pom version 0.11.0 Highest
Related Dependencies simpleclient-0.11.0.jarFile Path: /home/runner/.m2/repository/io/prometheus/simpleclient/0.11.0/simpleclient-0.11.0.jar MD5: 8a9b3b745aa8297c76b471eae4b55417 SHA1: 76338f1eba5d216efb9342137be9353ea9268d62 SHA256: dee025612a2bec65bb813eaf6830221ded9d44733d5c90855dbdcdf559f209eb pkg:maven/io.prometheus/simpleclient@0.11.0 simpleclient_common-0.11.0.jarFile Path: /home/runner/.m2/repository/io/prometheus/simpleclient_common/0.11.0/simpleclient_common-0.11.0.jar MD5: da2c4204346e086fa54f17a5ebb39194 SHA1: 32371ed0bcf87405156ea341b1e08470668488c5 SHA256: 960e071815b21daeb86d4188a2721e01b6895b9b94f43b6e4ab8532a2e7c7441 pkg:maven/io.prometheus/simpleclient_common@0.11.0 simpleclient_hotspot-0.11.0.jarFile Path: /home/runner/.m2/repository/io/prometheus/simpleclient_hotspot/0.11.0/simpleclient_hotspot-0.11.0.jar MD5: ed777c9d7ab78c391f5bd28f2e50bfe0 SHA1: e661dfd82f75e3c45e5f45954885d2f2793f7822 SHA256: 96a349c370007786c611257bce66930a4ab749146d360098069b9a50d478b4fd pkg:maven/io.prometheus/simpleclient_hotspot@0.11.0 simpleclient_tracer_common-0.11.0.jarFile Path: /home/runner/.m2/repository/io/prometheus/simpleclient_tracer_common/0.11.0/simpleclient_tracer_common-0.11.0.jar MD5: 87caa38f2e1b088bb7393903424da21f SHA1: eb4d97795ff70c3503b617455387cb216ca75621 SHA256: c8ccd2c9f6d2a69c76a269e24576ddbc90f9a9d59d563ec70bdc9088689fb96b pkg:maven/io.prometheus/simpleclient_tracer_common@0.11.0 simpleclient_tracer_otel-0.11.0.jarFile Path: /home/runner/.m2/repository/io/prometheus/simpleclient_tracer_otel/0.11.0/simpleclient_tracer_otel-0.11.0.jar MD5: ef07568e451f28eee45e3083c79bcc3c SHA1: b3ecd4d02e9e41de9f25490c6821c282ac5b1a2b SHA256: 9eb3a7f3e429b43b679e53404cdbb56bf110a6e3ca818069c799b23de4eafeb2 pkg:maven/io.prometheus/simpleclient_tracer_otel@0.11.0 simpleclient_tracer_otel_agent-0.11.0.jarFile Path: /home/runner/.m2/repository/io/prometheus/simpleclient_tracer_otel_agent/0.11.0/simpleclient_tracer_otel_agent-0.11.0.jar MD5: 2cfb62d029f02f9fe8d5e05115e828f7 SHA1: 75ba2ffb19ae704d1f9fb8b8b77dc1d3eab760a1 SHA256: b6193a52797ae7ebb0d8935925c51749b523f7b291124c00e8eadd8319ae41e4 pkg:maven/io.prometheus/simpleclient_tracer_otel_agent@0.11.0 Description:
snappy-java: A fast compression/decompression library License:
Apache-2.0: https://www.apache.org/licenses/LICENSE-2.0.html File Path: /home/runner/.m2/repository/org/xerial/snappy/snappy-java/1.1.10.5/snappy-java-1.1.10.5.jar
MD5: a52ffcdbbe525b486237a7098e5c5ff7
SHA1: ac605269f3598506196e469f1fb0d7ed5c55059e
SHA256: 0f3f1857ed33116583f480b4df5c0218836c47bfbc9c6221c0d73f356decf37b
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
snappy-java-1.1.10.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name snappy-java High Vendor jar package name snappy Highest Vendor jar package name xerial Highest Vendor Manifest bundle-activationpolicy lazy Low Vendor Manifest bundle-docurl http://www.xerial.org/ Low Vendor Manifest bundle-nativecode org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=x86-64,org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=x64,org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=amd64,org/xerial/snappy/native/Windows/x86/snappyjava.dll;osname=win32;processor=x86,org/xerial/snappy/native/Mac/x86/libsnappyjava.jnilib;osname=macosx;processor=x86,org/xerial/snappy/native/Mac/x86_64/libsnappyjava.dylib;osname=macosx;processor=x86-64,org/xerial/snappy/native/Mac/aarch64/libsnappyjava.dylib;osname=macosx;processor=aarch64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=x86-64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=x64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=amd64,org/xerial/snappy/native/Linux/x86/libsnappyjava.so;osname=linux;processor=x86,org/xerial/snappy/native/Linux/aarch64/libsnappyjava.so;osname=linux;processor=aarch64,org/xerial/snappy/native/Linux/riscv64/libsnappyjava.so;osname=linux;processor=riscv64,org/xerial/snappy/native/Linux/arm/libsnappyjava.so;osname=linux;processor=arm,org/xerial/snappy/native/Linux/armv7/libsnappyjava.so;osname=linux;processor=arm_le,org/xerial/snappy/native/Linux/ppc64/libsnappyjava.so;osname=linux;processor=ppc64le,org/xerial/snappy/native/Linux/s390x/libsnappyjava.so;osname=linux;processor=s390x,org/xerial/snappy/native/AIX/ppc/libsnappyjava.a;osname=aix;processor=ppc,org/xerial/snappy/native/AIX/ppc64/libsnappyjava.a;osname=aix;processor=ppc64,org/xerial/snappy/native/SunOS/x86/libsnappyjava.so;osname=sunos;processor=x86,org/xerial/snappy/native/SunOS/x86_64/libsnappyjava.so;osname=sunos;processor=x86-64,org/xerial/snappy/native/SunOS/sparc/libsnappyjava.so;osname=sunos;processor=sparc Low Vendor Manifest bundle-symbolicname org.xerial.snappy.snappy-java Medium Vendor Manifest implementation-url https://github.com/xerial/snappy-java Low Vendor Manifest Implementation-Vendor xerial.org High Vendor Manifest Implementation-Vendor-Id org.xerial.snappy Medium Vendor Manifest specification-vendor xerial.org Low Vendor pom artifactid snappy-java Highest Vendor pom artifactid snappy-java Low Vendor pom developer email leo@xerial.org Low Vendor pom developer id leo Medium Vendor pom developer name Taro L. Saito Medium Vendor pom groupid org.xerial.snappy Highest Vendor pom name snappy-java High Vendor pom organization name xerial.org High Vendor pom organization url xerial/snappy-java Medium Vendor pom url xerial/snappy-java Highest Product file name snappy-java High Product jar package name snappy Highest Product jar package name xerial Highest Product Manifest bundle-activationpolicy lazy Low Product Manifest bundle-docurl http://www.xerial.org/ Low Product Manifest Bundle-Name snappy-java: A fast compression/decompression library Medium Product Manifest bundle-nativecode org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=x86-64,org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=x64,org/xerial/snappy/native/Windows/x86_64/snappyjava.dll;osname=win32;processor=amd64,org/xerial/snappy/native/Windows/x86/snappyjava.dll;osname=win32;processor=x86,org/xerial/snappy/native/Mac/x86/libsnappyjava.jnilib;osname=macosx;processor=x86,org/xerial/snappy/native/Mac/x86_64/libsnappyjava.dylib;osname=macosx;processor=x86-64,org/xerial/snappy/native/Mac/aarch64/libsnappyjava.dylib;osname=macosx;processor=aarch64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=x86-64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=x64,org/xerial/snappy/native/Linux/x86_64/libsnappyjava.so;osname=linux;processor=amd64,org/xerial/snappy/native/Linux/x86/libsnappyjava.so;osname=linux;processor=x86,org/xerial/snappy/native/Linux/aarch64/libsnappyjava.so;osname=linux;processor=aarch64,org/xerial/snappy/native/Linux/riscv64/libsnappyjava.so;osname=linux;processor=riscv64,org/xerial/snappy/native/Linux/arm/libsnappyjava.so;osname=linux;processor=arm,org/xerial/snappy/native/Linux/armv7/libsnappyjava.so;osname=linux;processor=arm_le,org/xerial/snappy/native/Linux/ppc64/libsnappyjava.so;osname=linux;processor=ppc64le,org/xerial/snappy/native/Linux/s390x/libsnappyjava.so;osname=linux;processor=s390x,org/xerial/snappy/native/AIX/ppc/libsnappyjava.a;osname=aix;processor=ppc,org/xerial/snappy/native/AIX/ppc64/libsnappyjava.a;osname=aix;processor=ppc64,org/xerial/snappy/native/SunOS/x86/libsnappyjava.so;osname=sunos;processor=x86,org/xerial/snappy/native/SunOS/x86_64/libsnappyjava.so;osname=sunos;processor=x86-64,org/xerial/snappy/native/SunOS/sparc/libsnappyjava.so;osname=sunos;processor=sparc Low Product Manifest bundle-symbolicname org.xerial.snappy.snappy-java Medium Product Manifest Implementation-Title snappy-java High Product Manifest implementation-url https://github.com/xerial/snappy-java Low Product Manifest specification-title snappy-java Medium Product pom artifactid snappy-java Highest Product pom developer email leo@xerial.org Low Product pom developer id leo Low Product pom developer name Taro L. Saito Low Product pom groupid org.xerial.snappy Highest Product pom name snappy-java High Product pom organization name xerial.org Low Product pom url xerial/snappy-java High Version file version 1.1.10.5 High Version Manifest Bundle-Version 1.1.10.5 High Version Manifest Implementation-Version 1.1.10.5 High Version pom version 1.1.10.5 Highest
File Path: /home/runner/.m2/repository/org/xerial/snappy/snappy-java/1.1.10.5/snappy-java-1.1.10.5.jar/org/xerial/snappy/native/Windows/aarch64/snappyjava.dllMD5: e048fff98f2eab2d60b8d1b0ba68c738SHA1: 2b35231edb0e225390bb9811a859ffdac70a4f5cSHA256: c8ffc0b29a931c12c134e62d78e78e60f4cb07d341176363729ad9ca64f65008Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name snappyjava High Product file name snappyjava High
File Path: /home/runner/.m2/repository/org/xerial/snappy/snappy-java/1.1.10.5/snappy-java-1.1.10.5.jar/org/xerial/snappy/native/Windows/x86/snappyjava.dllMD5: bf5815cae57523b4abc1e534c42be880SHA1: 076d9af93933210cb53a952a88b8163b3b0210f5SHA256: dd61eba39e26462d12828ca2c85a31bb6beec3ee0b27409ad78a92131a3a318aReferenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name snappyjava High Product file name snappyjava High
File Path: /home/runner/.m2/repository/org/xerial/snappy/snappy-java/1.1.10.5/snappy-java-1.1.10.5.jar/org/xerial/snappy/native/Windows/x86_64/snappyjava.dllMD5: bbf1620e74dd44a34e5a86ccd1c9dc70SHA1: e4150416cdb0f65ee39e0f1c0c921e3ff9937d4eSHA256: 3879fdfd746b77f29e6fade812669796c8dfcf4db2f5d5409b10c5e584ae5494Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
Evidence Type Source Name Value Confidence Vendor file name snappyjava High Product file name snappyjava High
Description:
Spring Core License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/org/springframework/spring-core/5.3.20/spring-core-5.3.20.jar
MD5: 2716746463c37172898010391db93ef2
SHA1: 4b88aa3c401ede3d6c8ac78ea0c646cf326ec24b
SHA256: 42d70d78b8822601a3b61c88dadf4be6a0021dde169a772c3fd4a6b8b2b61c90
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
spring-core-5.3.20.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name spring-core High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name core Highest Vendor jar package name io Highest Vendor jar package name springframework Highest Vendor Manifest automatic-module-name spring.core Medium Vendor pom artifactid spring-core Highest Vendor pom artifactid spring-core Low Vendor pom developer email jhoeller@pivotal.io Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Core High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-core High Product hint analyzer product springsource_spring_framework Highest Product jar package name core Highest Product jar package name io Highest Product jar package name springframework Highest Product Manifest automatic-module-name spring.core Medium Product Manifest Implementation-Title spring-core High Product pom artifactid spring-core Highest Product pom developer email jhoeller@pivotal.io Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Core High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 5.3.20 High Version Manifest Implementation-Version 5.3.20 High Version pom version 5.3.20 Highest
Related Dependencies spring-aop-5.3.20.jarFile Path: /home/runner/.m2/repository/org/springframework/spring-aop/5.3.20/spring-aop-5.3.20.jar MD5: 588d64fb912ed0c637e55c0878c18c4f SHA1: c82f17997ab18ecafa8d08ce34a7c7aa4a04ef9e SHA256: 00c680bef629e09f0d5fec1fe872452d9e18a14435faaaf284e51b3b1fb77e19 pkg:maven/org.springframework/spring-aop@5.3.20 spring-beans-5.3.20.jarFile Path: /home/runner/.m2/repository/org/springframework/spring-beans/5.3.20/spring-beans-5.3.20.jar MD5: 53515694bf34d29522adf7c9e8b5164c SHA1: 0ab88bd9e3a8307f5c0516c15d295c88ec318659 SHA256: 940dc731aedb1b194ab6db0e879437adb9f7c14af825dfa7596ccd3d69bba7e8 pkg:maven/org.springframework/spring-beans@5.3.20 spring-context-5.3.20.jarFile Path: /home/runner/.m2/repository/org/springframework/spring-context/5.3.20/spring-context-5.3.20.jar MD5: f54a37b6c4b217cdb0482b286ccf0bf0 SHA1: 517a42165221ea944c8b794154c10b69c0128281 SHA256: 2b5405c2baeab005300713bfd2ffad228b9cccf4dc8c8f757897831278362eee pkg:maven/org.springframework/spring-context@5.3.20 spring-expression-5.3.20.jarFile Path: /home/runner/.m2/repository/org/springframework/spring-expression/5.3.20/spring-expression-5.3.20.jar MD5: b37937ea560f8801a31217b93484681f SHA1: 20e179f0dfabf0a46428f22c2150c9c4850fd15d SHA256: 6238aa974f63cd0f92da31446d4abd3fb69496785624cd02c5adaea703b0c5c7 pkg:maven/org.springframework/spring-expression@5.3.20 spring-jcl-5.3.20.jarFile Path: /home/runner/.m2/repository/org/springframework/spring-jcl/5.3.20/spring-jcl-5.3.20.jar MD5: 5960098d2253e57c262e243b996de56f SHA1: 35119231d09863699567ce579c21512ddcbc5407 SHA256: fb6c6bf524b19a03103812e0104eaf0bcbc178ae8f425db8b547963b13483e28 pkg:maven/org.springframework/spring-jcl@5.3.20 CVE-2023-20860 suppress
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass. NVD-CWE-noinfo
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-20861 suppress
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition. NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-20863 suppress
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition. CWE-400 Uncontrolled Resource Consumption, CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Spring Web License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/org/springframework/spring-web/5.3.20/spring-web-5.3.20.jar
MD5: 25d3b11e5febb6c3d06a68b8e07a7e2f
SHA1: 3c2fe9363760d62d5b7c9f087bb4255e3377a0b2
SHA256: d6db8d7a8239a0403f4fc2066b765f5209e1b14af58b5bb8215482188ef640bc
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
spring-web-5.3.20.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name spring-web High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name springframework Highest Vendor jar package name web Highest Vendor Manifest automatic-module-name spring.web Medium Vendor pom artifactid spring-web Highest Vendor pom artifactid spring-web Low Vendor pom developer email jhoeller@pivotal.io Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Web High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-web High Product hint analyzer product springsource_spring_framework Highest Product jar package name springframework Highest Product jar package name web Highest Product Manifest automatic-module-name spring.web Medium Product Manifest Implementation-Title spring-web High Product pom artifactid spring-web Highest Product pom developer email jhoeller@pivotal.io Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Web High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 5.3.20 High Version Manifest Implementation-Version 5.3.20 High Version pom version 5.3.20 Highest
CVE-2016-1000027 suppress
Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue if used for Java deserialization of untrusted data. Depending on how the library is implemented within a product, this issue may or not occur, and authentication may be required. NOTE: the vendor's position is that untrusted data is not an intended use case. The product's behavior will not be changed because some users rely on deserialization of trusted data. CWE-502 Deserialization of Untrusted Data
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions:
CVE-2024-22243 (OSSINDEX)suppress
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.
Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2024-22243 for details CWE-20 Improper Input Validation
CVSSv3:
Base Score: HIGH (8.100000381469727) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.springframework:spring-web:5.3.20:*:*:*:*:*:*:* CVE-2024-22262 (OSSINDEX)suppress
Applications that use UriComponentsBuilder to parse an externally provided URL (e.g. through a query parameter) AND perform validation checks on the host of the parsed URL may be vulnerable to a open redirect https://cwe.mitre.org/data/definitions/601.html attack or to a SSRF attack if the URL is used after passing validation checks.
This is the same as CVE-2024-22259 https://spring.io/security/cve-2024-22259 and CVE-2024-22243 https://spring.io/security/cve-2024-22243 , but with different input.
CWE-20 Improper Input Validation
CVSSv3:
Base Score: HIGH (8.100000381469727) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N References:
Vulnerable Software & Versions (OSSINDEX):
cpe:2.3:a:org.springframework:spring-web:5.3.20:*:*:*:*:*:*:* CVE-2023-20860 suppress
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass. NVD-CWE-noinfo
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-20861 suppress
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition. NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-20863 suppress
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition. CWE-400 Uncontrolled Resource Consumption, CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Spring Web MVC License:
Apache License, Version 2.0: https://www.apache.org/licenses/LICENSE-2.0 File Path: /home/runner/.m2/repository/org/springframework/spring-webmvc/5.3.20/spring-webmvc-5.3.20.jar
MD5: 136b8022b6ffda56891422bda4c008a9
SHA1: 8ac1b72a1f5c41fdc2cb3340cd94f795af260301
SHA256: c48ed223170af7efc363e6ee917e25448b5a6015b36dff3bc4e685858179c89c
Referenced In Project/Scope: shardingsphere-transaction-base-seata-at:provided
spring-webmvc-5.3.20.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/io.seata/seata-all@2.0.0
Evidence Type Source Name Value Confidence Vendor file name spring-webmvc High Vendor hint analyzer vendor pivotal software Highest Vendor hint analyzer vendor SpringSource Highest Vendor hint analyzer vendor vmware Highest Vendor jar package name mvc Highest Vendor jar package name springframework Highest Vendor jar package name web Highest Vendor Manifest automatic-module-name spring.webmvc Medium Vendor pom artifactid spring-webmvc Highest Vendor pom artifactid spring-webmvc Low Vendor pom developer email jhoeller@pivotal.io Low Vendor pom developer id jhoeller Medium Vendor pom developer name Juergen Hoeller Medium Vendor pom groupid org.springframework Highest Vendor pom name Spring Web MVC High Vendor pom organization name Spring IO High Vendor pom organization url https://spring.io/projects/spring-framework Medium Vendor pom url spring-projects/spring-framework Highest Product file name spring-webmvc High Product hint analyzer product springsource_spring_framework Highest Product jar package name mvc Highest Product jar package name springframework Highest Product jar package name web Highest Product Manifest automatic-module-name spring.webmvc Medium Product Manifest Implementation-Title spring-webmvc High Product pom artifactid spring-webmvc Highest Product pom developer email jhoeller@pivotal.io Low Product pom developer id jhoeller Low Product pom developer name Juergen Hoeller Low Product pom groupid org.springframework Highest Product pom name Spring Web MVC High Product pom organization name Spring IO Low Product pom organization url https://spring.io/projects/spring-framework Low Product pom url spring-projects/spring-framework High Version file version 5.3.20 High Version Manifest Implementation-Version 5.3.20 High Version pom version 5.3.20 Highest
CVE-2023-20860 suppress
Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security configuration with the mvcRequestMatcher creates a mismatch in pattern matching between Spring Security and Spring MVC, and the potential for a security bypass. NVD-CWE-noinfo
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-20861 suppress
In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition. NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-20863 suppress
In spring framework versions prior to 5.2.24 release+ ,5.3.27+ and 6.0.8+ , it is possible for a user to provide a specially crafted SpEL expression that may cause a denial-of-service (DoS) condition. CWE-400 Uncontrolled Resource Consumption, CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
CVSSv3:
Base Score: MEDIUM (6.5) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.
License:
The BSD License: http://www.opensource.org/licenses/bsd-license.php File Path: /home/runner/.m2/repository/org/codehaus/woodstox/stax2-api/3.1.4/stax2-api-3.1.4.jar
MD5: c08e89de601b0a78f941b2c29db565c3
SHA1: ac19014b1e6a7c08aad07fe114af792676b685b7
SHA256: 86d7c0b775a7c9b454cc6ba61d40a8eb3b99cc129f832eb9b977a3755b4b338e
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
stax2-api-3.1.4.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name stax2-api High Vendor jar package name codehaus Highest Vendor jar package name stax2 Highest Vendor jar package name typed Highest Vendor jar package name validation Highest Vendor Manifest bundle-docurl http://fasterxml.com Low Vendor Manifest bundle-symbolicname stax2-api Medium Vendor pom artifactid stax2-api Highest Vendor pom artifactid stax2-api Low Vendor pom developer email tatu@fasterxml.com Low Vendor pom developer id tatu Medium Vendor pom developer name Tatu Saloranta Medium Vendor pom groupid org.codehaus.woodstox Highest Vendor pom name Stax2 API High Vendor pom organization name fasterxml.com High Vendor pom organization url http://fasterxml.com Medium Vendor pom url http://wiki.fasterxml.com/WoodstoxStax2 Highest Product file name stax2-api High Product jar package name codehaus Highest Product jar package name stax2 Highest Product jar package name typed Highest Product jar package name validation Highest Product Manifest bundle-docurl http://fasterxml.com Low Product Manifest Bundle-Name Stax2 API Medium Product Manifest bundle-symbolicname stax2-api Medium Product pom artifactid stax2-api Highest Product pom developer email tatu@fasterxml.com Low Product pom developer id tatu Low Product pom developer name Tatu Saloranta Low Product pom groupid org.codehaus.woodstox Highest Product pom name Stax2 API High Product pom organization name fasterxml.com Low Product pom organization url http://fasterxml.com Low Product pom url http://wiki.fasterxml.com/WoodstoxStax2 Medium Version file version 3.1.4 High Version Manifest Bundle-Version 3.1.4 High Version pom version 3.1.4 Highest
Description:
tax2 API is an extension to basic Stax 1.0 API that adds significant new functionality, such as full-featured bi-direction validation interface and high-performance Typed Access API.
License:
The BSD License: http://www.opensource.org/licenses/bsd-license.php File Path: /home/runner/.m2/repository/org/codehaus/woodstox/stax2-api/4.2.1/stax2-api-4.2.1.jar
MD5: af8377bc7882332e22456616a9f164f6
SHA1: a3f7325c52240418c2ba257b103c3c550e140c83
SHA256: 678567e48b51a42c65c699f266539ad3d676d4b1a5b0ad7d89ece8b9d5772579
Referenced In Projects/Scopes: shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-jdbc-distribution:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-jdbc:compile shardingsphere-standalone-mode-repository-jdbc:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile stax2-api-4.2.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1 pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name stax2-api High Vendor jar package name codehaus Highest Vendor jar package name stax2 Highest Vendor jar package name typed Highest Vendor jar package name validation Highest Vendor Manifest automatic-module-name org.codehaus.stax2 Medium Vendor Manifest bundle-docurl http://github.com/FasterXML/stax2-api Low Vendor Manifest bundle-symbolicname stax2-api Medium Vendor Manifest implementation-build-date 2020-05-14 04:15:18+0000 Low Vendor Manifest Implementation-Vendor fasterxml.com High Vendor Manifest Implementation-Vendor-Id org.codehaus.woodstox Medium Vendor Manifest specification-vendor fasterxml.com Low Vendor pom artifactid stax2-api Highest Vendor pom artifactid stax2-api Low Vendor pom developer email tatu@fasterxml.com Low Vendor pom developer id tatu Medium Vendor pom developer name Tatu Saloranta Medium Vendor pom groupid org.codehaus.woodstox Highest Vendor pom name Stax2 API High Vendor pom organization name fasterxml.com High Vendor pom organization url http://fasterxml.com Medium Vendor pom parent-artifactid oss-parent Low Vendor pom parent-groupid com.fasterxml Medium Vendor pom url http://github.com/FasterXML/stax2-api Highest Product file name stax2-api High Product jar package name codehaus Highest Product jar package name stax2 Highest Product jar package name typed Highest Product jar package name validation Highest Product Manifest automatic-module-name org.codehaus.stax2 Medium Product Manifest bundle-docurl http://github.com/FasterXML/stax2-api Low Product Manifest Bundle-Name Stax2 API Medium Product Manifest bundle-symbolicname stax2-api Medium Product Manifest implementation-build-date 2020-05-14 04:15:18+0000 Low Product Manifest Implementation-Title Stax2 API High Product Manifest specification-title Stax2 API Medium Product pom artifactid stax2-api Highest Product pom developer email tatu@fasterxml.com Low Product pom developer id tatu Low Product pom developer name Tatu Saloranta Low Product pom groupid org.codehaus.woodstox Highest Product pom name Stax2 API High Product pom organization name fasterxml.com Low Product pom organization url http://fasterxml.com Low Product pom parent-artifactid oss-parent Medium Product pom parent-groupid com.fasterxml Medium Product pom url http://github.com/FasterXML/stax2-api Medium Version file version 4.2.1 High Version Manifest Bundle-Version 4.2.1 High Version Manifest Implementation-Version 4.2.1 High Version pom parent-version 4.2.1 Low Version pom version 4.2.1 Highest
Description:
An implementation of the JSP Standard Tag Library (JSTL).
License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/org/apache/taglibs/taglibs-standard-impl/1.2.5/taglibs-standard-impl-1.2.5.jar
MD5: 8e5c8db242fbef3db1acfcbb3bc8ec8b
SHA1: 9b9783ccb2a323383e6e20e36d368f8997b71967
SHA256: d075cb77d94e2d115b4d90a897b57d65cc31ed8e1b95d65361da324642705728
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
taglibs-standard-impl-1.2.5.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name taglibs-standard-impl High Vendor jar package name apache Highest Vendor jar package name standard Highest Vendor jar package name tag Highest Vendor jar package name taglibs Highest Vendor Manifest bundle-docurl http://tomcat.apache.org/taglibs/standard-1.2.5/taglibs-standard-impl Low Vendor Manifest bundle-symbolicname org.apache.taglibs.standard-impl Medium Vendor pom artifactid taglibs-standard-impl Highest Vendor pom artifactid taglibs-standard-impl Low Vendor pom developer name Bjorn Townsend Medium Vendor pom developer name Dmitri Plotnikov Medium Vendor pom developer name Felipe Leme Medium Vendor pom developer name Glenn Nielsen Medium Vendor pom developer name Hans Bergsten Medium Vendor pom developer name Henri Yandell Medium Vendor pom developer name Jan Luehe Medium Vendor pom developer name Justyna Horwat Medium Vendor pom developer name Mark Kolb Medium Vendor pom developer name Nathan Abramson Medium Vendor pom developer name Pierre Delisle Medium Vendor pom developer name Scott Hasse Medium Vendor pom developer name Shawn Bayern Medium Vendor pom groupid org.apache.taglibs Highest Vendor pom name Apache Standard Taglib Implementation High Vendor pom parent-artifactid taglibs-standard Low Product file name taglibs-standard-impl High Product jar package name apache Highest Product jar package name standard Highest Product jar package name tag Highest Product jar package name taglibs Highest Product Manifest bundle-docurl http://tomcat.apache.org/taglibs/standard-1.2.5/taglibs-standard-impl Low Product Manifest Bundle-Name Apache Standard Taglib Implementation Medium Product Manifest bundle-symbolicname org.apache.taglibs.standard-impl Medium Product Manifest Implementation-Title Apache Standard Taglib Implementation High Product pom artifactid taglibs-standard-impl Highest Product pom developer name Bjorn Townsend Low Product pom developer name Dmitri Plotnikov Low Product pom developer name Felipe Leme Low Product pom developer name Glenn Nielsen Low Product pom developer name Hans Bergsten Low Product pom developer name Henri Yandell Low Product pom developer name Jan Luehe Low Product pom developer name Justyna Horwat Low Product pom developer name Mark Kolb Low Product pom developer name Nathan Abramson Low Product pom developer name Pierre Delisle Low Product pom developer name Scott Hasse Low Product pom developer name Shawn Bayern Low Product pom groupid org.apache.taglibs Highest Product pom name Apache Standard Taglib Implementation High Product pom parent-artifactid taglibs-standard Medium Version file version 1.2.5 High Version Manifest Bundle-Version 1.2.5 High Version Manifest Implementation-Version 1.2.5 High Version pom version 1.2.5 Highest
Related Dependencies jetty-runner-9.3.20.v20170531.jar (shaded: org.apache.taglibs:taglibs-standard-spec:1.2.5)File Path: /home/runner/.m2/repository/org/eclipse/jetty/jetty-runner/9.3.20.v20170531/jetty-runner-9.3.20.v20170531.jar/META-INF/maven/org.apache.taglibs/taglibs-standard-spec/pom.xml MD5: 2a3df2a82b3bd6de008763fcd87ed10c SHA1: 6e5f587dbddfa61aea4d40261f0ac87382e307b5 SHA256: a96c44bd2430ff9d437dec0d1fdb91fd9e9435133372f85651987a6006523569 pkg:maven/org.apache.taglibs/taglibs-standard-spec@1.2.5 taglibs-standard-spec-1.2.5.jarFile Path: /home/runner/.m2/repository/org/apache/taglibs/taglibs-standard-spec/1.2.5/taglibs-standard-spec-1.2.5.jar MD5: 671c434560d04e8f06aac02a413d11e4 SHA1: c3bb98c30f75fef1e229d1d03cf8457de22f1ba0 SHA256: 81a195f8acab3f072fe4d6c279b7c29575bcac49081076e3d08bbda829275189 pkg:maven/org.apache.taglibs/taglibs-standard-spec@1.2.5 Description:
Token provider project File Path: /home/runner/.m2/repository/org/apache/kerby/token-provider/1.0.1/token-provider-1.0.1.jarMD5: c9ebfeba17a28a69f33acbb5b6e831c5SHA1: e6feb6b7c06600924e8b6bda3263c870cfb0a447SHA256: 022c92d7438b60789bc212f53f1f33ced2656ba8bf073a1f587df51e083e368aReferenced In Project/Scope: shardingsphere-infra-database-hive:providedtoken-provider-1.0.1.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name token-provider High Vendor jar package name apache Highest Vendor jar package name kerby Highest Vendor jar package name provider Highest Vendor Manifest implementation-url http://directory.apache.org/kerby/kerby-provider/token-provider Low Vendor Manifest Implementation-Vendor The Apache Software Foundation High Vendor Manifest Implementation-Vendor-Id org.apache.kerby Medium Vendor Manifest specification-vendor The Apache Software Foundation Low Vendor pom artifactid token-provider Highest Vendor pom artifactid token-provider Low Vendor pom groupid org.apache.kerby Highest Vendor pom name Token provider High Vendor pom parent-artifactid kerby-provider Low Product file name token-provider High Product jar package name apache Highest Product jar package name kerby Highest Product jar package name provider Highest Product Manifest Implementation-Title Token provider High Product Manifest implementation-url http://directory.apache.org/kerby/kerby-provider/token-provider Low Product Manifest specification-title Token provider Medium Product pom artifactid token-provider Highest Product pom groupid org.apache.kerby Highest Product pom name Token provider High Product pom parent-artifactid kerby-provider Medium Version file version 1.0.1 High Version Manifest Implementation-Version 1.0.1 High Version pom version 1.0.1 Highest
File Path: /home/runner/.m2/repository/com/atomikos/transactions/6.0.0/transactions-6.0.0.jarMD5: 99686abff350ee58af026cdfa1179732SHA1: 296b7fa6c12b4e9197f202e31ebc974c3b05a1edSHA256: e8d120f05f01a0422cdd059f89ea161034a670935215a29b41846e2bfbdf8b0cReferenced In Projects/Scopes:
shardingsphere-proxy-backend-opengauss:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-transaction-xa-atomikos:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-transaction-xa-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile transactions-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name transactions High Vendor jar package name atomikos Highest Vendor jar package name atomikos Low Vendor jar package name icatch Low Vendor jar package name imp Low Vendor pom artifactid transactions Highest Vendor pom artifactid transactions Low Vendor pom groupid com.atomikos Highest Vendor pom name Transactions Core High Vendor pom parent-artifactid ate Low Product file name transactions High Product jar package name atomikos Highest Product jar package name icatch Low Product jar package name imp Low Product pom artifactid transactions Highest Product pom groupid com.atomikos Highest Product pom name Transactions Core High Product pom parent-artifactid ate Medium Version file version 6.0.0 High Version pom version 6.0.0 Highest
File Path: /home/runner/.m2/repository/com/atomikos/transactions-api/6.0.0/transactions-api-6.0.0.jarMD5: bce16b9f9a32a24fe76e3bd56258f772SHA1: cc1eb60b1a86f38cdaeea9665b55ed2549b691abSHA256: 6776b034aad83b2eeb2771eeb7cb4d346c9b22f76f063788ac225818cbf9983bReferenced In Projects/Scopes:
shardingsphere-proxy-backend-opengauss:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-transaction-xa-atomikos:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-transaction-xa-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile transactions-api-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/com.atomikos/transactions@6.0.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/com.atomikos/transactions@6.0.0 pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name transactions-api High Vendor jar package name atomikos Highest Vendor jar package name atomikos Low Vendor jar package name icatch Low Vendor pom artifactid transactions-api Highest Vendor pom artifactid transactions-api Low Vendor pom groupid com.atomikos Highest Vendor pom name Transactions API High Vendor pom parent-artifactid ate Low Product file name transactions-api High Product jar package name atomikos Highest Product jar package name icatch Low Product pom artifactid transactions-api Highest Product pom groupid com.atomikos Highest Product pom name Transactions API High Product pom parent-artifactid ate Medium Version file version 6.0.0 High Version pom version 6.0.0 Highest
File Path: /home/runner/.m2/repository/com/atomikos/transactions-jdbc/6.0.0/transactions-jdbc-6.0.0.jarMD5: 478ed95e2906c200815a2b093772d062SHA1: 0ec2c0c770e028bc9810f25c7c48932dde001242SHA256: cc9c173f797689a7206d36eccfa733ce58bf98e46cc5816993a03a4799cf0608Referenced In Projects/Scopes:
shardingsphere-proxy-backend-opengauss:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-transaction-xa-atomikos:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-transaction-xa-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile transactions-jdbc-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name transactions-jdbc High Vendor jar package name atomikos Highest Vendor jar package name atomikos Low Vendor jar package name internal Low Vendor jar package name jdbc Highest Vendor jar package name jdbc Low Vendor pom artifactid transactions-jdbc Highest Vendor pom artifactid transactions-jdbc Low Vendor pom groupid com.atomikos Highest Vendor pom name Transactions JDBC High Vendor pom parent-artifactid ate Low Product file name transactions-jdbc High Product jar package name atomikos Highest Product jar package name internal Low Product jar package name jdbc Highest Product jar package name jdbc Low Product pom artifactid transactions-jdbc Highest Product pom groupid com.atomikos Highest Product pom name Transactions JDBC High Product pom parent-artifactid ate Medium Version file version 6.0.0 High Version pom version 6.0.0 Highest
File Path: /home/runner/.m2/repository/com/atomikos/transactions-jta/6.0.0/transactions-jta-6.0.0.jarMD5: 6458dde6359aab279a939cbd55d380abSHA1: a6cec70d4a7eb32e28762da32881b48d86124ff2SHA256: ef03d2ae1f9337ca4aadba0f464a9ed12f6dd0ae16da231e8e3cd1329b19cf97Referenced In Projects/Scopes:
shardingsphere-proxy-backend-opengauss:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-agent-metrics-core:provided shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-env:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-agent-plugin-logging:provided shardingsphere-proxy-backend-core:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-proxy-frontend-postgresql:compile shardingsphere-transaction-xa-atomikos:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-transaction-xa-core:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-proxy-backend-mysql:compile shardingsphere-test-e2e-pipeline:compile transactions-jta-6.0.0.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-atomikos@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-transaction@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-transaction-xa-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name transactions-jta High Vendor jar package name atomikos Highest Vendor jar package name atomikos Low Vendor jar package name datasource Low Vendor jar package name jta Highest Vendor pom artifactid transactions-jta Highest Vendor pom artifactid transactions-jta Low Vendor pom groupid com.atomikos Highest Vendor pom name Transactions JTA High Vendor pom parent-artifactid ate Low Product file name transactions-jta High Product jar package name atomikos Highest Product jar package name datasource Low Product jar package name jta Highest Product pom artifactid transactions-jta Highest Product pom groupid com.atomikos Highest Product pom name Transactions JTA High Product pom parent-artifactid ate Medium Version file version 6.0.0 High Version pom version 6.0.0 Highest
Description:
TXW is a library that allows you to write XML documents.
File Path: /home/runner/.m2/repository/org/glassfish/jaxb/txw2/2.3.9/txw2-2.3.9.jarMD5: 5db04c7917b3c0a07862a7e63bfc1581SHA1: 13a78453a89bf7d268382a520cba4d5435c5adfcSHA256: 973018b87af911ecf6e6d861dd0d6a477e4d8ae6a883ec5d073d3df1330b87f0Referenced In Projects/Scopes:
shardingsphere-test-fixture-database:compile shardingsphere-test-it-parser:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-test-it:compile shardingsphere-test-util:compile shardingsphere-test-e2e-agent-plugins-logging:compile shardingsphere-test-e2e-sql:compile shardingsphere-test-e2e-agent-plugins:compile shardingsphere-test-e2e-operation:compile shardingsphere-test-it-yaml:compile shardingsphere-test-fixture:compile shardingsphere-test-e2e-agent-plugins-tracing:compile shardingsphere-test-it-spi:compile shardingsphere-test-fixture-infra:compile shardingsphere-test-e2e-env:compile shardingsphere-test:compile shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-test-it-optimizer:compile shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-test-it-pipeline:compile shardingsphere-test-e2e-showprocesslist:compile shardingsphere-test-e2e-agent-fixture:compile shardingsphere-test-native:compile shardingsphere-test-e2e-transaction:compile shardingsphere-test-e2e:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-test-e2e-agent:compile shardingsphere-test-it-rewriter:compile shardingsphere-test-e2e-agent-plugins-metrics:compile shardingsphere-test-e2e-pipeline:compile txw2-2.3.9.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 pkg:maven/org.glassfish.jaxb/jaxb-runtime@2.3.9 Evidence Type Source Name Value Confidence Vendor file name txw2 High Vendor jar package name sun Highest Vendor jar package name txw Highest Vendor jar package name txw2 Highest Vendor jar package name xml Highest Vendor jar (hint) package name oracle Highest Vendor Manifest git-revision 143ffd0 Low Vendor Manifest Implementation-Vendor Eclipse Foundation High Vendor Manifest Implementation-Vendor-Id org.eclipse Medium Vendor pom artifactid txw2 Highest Vendor pom artifactid txw2 Low Vendor pom groupid org.glassfish.jaxb Highest Vendor pom name TXW2 Runtime High Vendor pom parent-artifactid jaxb-txw-parent Low Vendor pom parent-groupid com.sun.xml.bind.mvn Medium Vendor pom url https://eclipse-ee4j.github.io/jaxb-ri/ Highest Product file name txw2 High Product jar package name sun Highest Product jar package name txw Highest Product jar package name txw2 Highest Product jar package name xml Highest Product Manifest git-revision 143ffd0 Low Product Manifest Implementation-Title Jakarta XML Binding Implementation High Product Manifest specification-title Jakarta XML Binding Medium Product pom artifactid txw2 Highest Product pom groupid org.glassfish.jaxb Highest Product pom name TXW2 Runtime High Product pom parent-artifactid jaxb-txw-parent Medium Product pom parent-groupid com.sun.xml.bind.mvn Medium Product pom url https://eclipse-ee4j.github.io/jaxb-ri/ Medium Version file version 2.3.9 High Version Manifest build-id 2.3.9 Medium Version Manifest Implementation-Version 2.3.9 High Version Manifest major-version 2.3.9 Medium Version pom version 2.3.9 Highest
Description:
Bean Validation API
License:
The Apache Software License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/javax/validation/validation-api/1.1.0.Final/validation-api-1.1.0.Final.jar
MD5: 4c257f52462860b62ab3cdab45f53082
SHA1: 8613ae82954779d518631e05daa73a6a954817d5
SHA256: f39d7ba7253e35f5ac48081ec1bc28c5df9b32ac4b7db20853e5a8e76bf7b0ed
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
validation-api-1.1.0.Final.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name validation-api High Vendor jar package name javax Highest Vendor jar package name validation Highest Vendor Manifest bundle-symbolicname javax.validation.api Medium Vendor pom artifactid validation-api Highest Vendor pom artifactid validation-api Low Vendor pom developer email emmanuel@hibernate.org Low Vendor pom developer email gunnar@hibernate.org Low Vendor pom developer email hferents@redhat.com Low Vendor pom developer id emmanuelbernard Medium Vendor pom developer id epbernard Medium Vendor pom developer id gunnar.morling Medium Vendor pom developer id hardy.ferentschik Medium Vendor pom developer name Emmanuel Bernard Medium Vendor pom developer name Gunnar Morling Medium Vendor pom developer name Hardy Ferentschik Medium Vendor pom developer org JBoss, by Red Hat Medium Vendor pom groupid javax.validation Highest Vendor pom name Bean Validation API High Vendor pom url http://beanvalidation.org Highest Product file name validation-api High Product jar package name javax Highest Product jar package name validation Highest Product Manifest Bundle-Name Bean Validation API Medium Product Manifest bundle-symbolicname javax.validation.api Medium Product pom artifactid validation-api Highest Product pom developer email emmanuel@hibernate.org Low Product pom developer email gunnar@hibernate.org Low Product pom developer email hferents@redhat.com Low Product pom developer id emmanuelbernard Low Product pom developer id epbernard Low Product pom developer id gunnar.morling Low Product pom developer id hardy.ferentschik Low Product pom developer name Emmanuel Bernard Low Product pom developer name Gunnar Morling Low Product pom developer name Hardy Ferentschik Low Product pom developer org JBoss, by Red Hat Low Product pom groupid javax.validation Highest Product pom name Bean Validation API High Product pom url http://beanvalidation.org Medium Version Manifest Bundle-Version 1.1.0.Final High Version pom version 1.1.0.Final Highest
Description:
Compile time annotations and compile time annotation processor to generate consistent value object using
either abstract class, interface or annotation as a base. File Path: /home/runner/.m2/repository/org/immutables/value/2.9.3/value-2.9.3.jarMD5: 8d5104cfda4a55244f876a4ca5bb041fSHA1: fa64592ea2e7559ef406593904c10ef2cca1f36eSHA256: d16b7cc04f50217b495c44a783424d68dbe7cb1bc8f71bff230d55f48b997585Referenced In Project/Scope: shardingsphere-sql-federation-optimizer:providedvalue-2.9.3.jar is in the transitive dependency tree of the listed items. Included by:
Evidence Type Source Name Value Confidence Vendor file name value High Vendor jar package name immutables Highest Vendor jar package name processor Highest Vendor jar package name value Highest Vendor Manifest automatic-module-name org.immutables.value Medium Vendor pom artifactid value Highest Vendor pom artifactid value Low Vendor pom groupid org.immutables Highest Vendor pom name ${project.groupId}.${project.artifactId} High Vendor pom parent-artifactid immutables Low Product file name value High Product jar package name immutables Highest Product jar package name processor Highest Product jar package name value Highest Product Manifest automatic-module-name org.immutables.value Medium Product pom artifactid value Highest Product pom groupid org.immutables Highest Product pom name ${project.groupId}.${project.artifactId} High Product pom parent-artifactid immutables Medium Version file version 2.9.3 High Version pom version 2.9.3 Highest
Description:
Jetty module for Jetty :: Websocket :: API License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/jetty/websocket/websocket-api/9.3.20.v20170531/websocket-api-9.3.20.v20170531.jar
MD5: e70cd52e9b48a30088c18c4ef1dc203f
SHA1: c787782c5acbf916dc05277c98f5e9a76497eb32
SHA256: d49e5e5c9c199c016c02a8d973cb72e9cfbb4cdaaa72f79cdf52cd8204487e56
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
websocket-api-9.3.20.v20170531.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name websocket-api High Vendor jar package name api Highest Vendor jar package name eclipse Highest Vendor jar package name jetty Highest Vendor jar package name websocket Highest Vendor Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.websocket.api Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom artifactid websocket-api Highest Vendor pom artifactid websocket-api Low Vendor pom groupid org.eclipse.jetty.websocket Highest Vendor pom name Jetty :: Websocket :: API High Vendor pom parent-artifactid websocket-parent Low Product file name websocket-api High Product jar package name api Highest Product jar package name eclipse Highest Product jar package name jetty Highest Product jar package name websocket Highest Product Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest Bundle-Name Jetty :: Websocket :: API Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname org.eclipse.jetty.websocket.api Medium Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product Manifest url http://www.eclipse.org/jetty Low Product pom artifactid websocket-api Highest Product pom groupid org.eclipse.jetty.websocket Highest Product pom name Jetty :: Websocket :: API High Product pom parent-artifactid websocket-parent Medium Version file version 9.3.20.v20170531 High Version Manifest Bundle-Version 9.3.20.v20170531 High Version Manifest Implementation-Version 9.3.20.v20170531 High Version pom version 9.3.20.v20170531 Highest
Description:
Jetty module for Jetty :: Websocket :: Server License:
http://www.apache.org/licenses/LICENSE-2.0, http://www.eclipse.org/org/documents/epl-v10.php File Path: /home/runner/.m2/repository/org/eclipse/jetty/websocket/websocket-server/9.3.20.v20170531/websocket-server-9.3.20.v20170531.jar
MD5: cb75277527409ba3530554a773c2dc95
SHA1: bd02308e72e73f60f3b313e831b18a899c04658e
SHA256: c75dca33532f9884e044dfa2e3772a23dc91bfdfe3db9676c2ccf03ca12eba7d
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
websocket-server-9.3.20.v20170531.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name websocket-server High Vendor jar package name eclipse Highest Vendor jar package name jetty Highest Vendor jar package name server Highest Vendor jar package name websocket Highest Vendor Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Vendor Manifest bundle-docurl http://www.eclipse.org/jetty Low Vendor Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Vendor Manifest bundle-symbolicname org.eclipse.jetty.websocket.server Medium Vendor Manifest Implementation-Vendor Eclipse.org - Jetty High Vendor Manifest originally-created-by Apache Maven Bundle Plugin Low Vendor Manifest url http://www.eclipse.org/jetty Low Vendor pom artifactid websocket-server Highest Vendor pom artifactid websocket-server Low Vendor pom groupid org.eclipse.jetty.websocket Highest Vendor pom name Jetty :: Websocket :: Server High Vendor pom parent-artifactid websocket-parent Low Product file name websocket-server High Product jar package name eclipse Highest Product jar package name jetty Highest Product jar package name server Highest Product jar package name websocket Highest Product Manifest bundle-copyright Copyright (c) 2008-2017 Mort Bay Consulting Pty. Ltd. Low Product Manifest bundle-docurl http://www.eclipse.org/jetty Low Product Manifest Bundle-Name Jetty :: Websocket :: Server Medium Product Manifest bundle-requiredexecutionenvironment JavaSE-1.8 Low Product Manifest bundle-symbolicname org.eclipse.jetty.websocket.server Medium Product Manifest originally-created-by Apache Maven Bundle Plugin Low Product Manifest url http://www.eclipse.org/jetty Low Product pom artifactid websocket-server Highest Product pom groupid org.eclipse.jetty.websocket Highest Product pom name Jetty :: Websocket :: Server High Product pom parent-artifactid websocket-parent Medium Version file version 9.3.20.v20170531 High Version Manifest Bundle-Version 9.3.20.v20170531 High Version Manifest Implementation-Version 9.3.20.v20170531 High Version pom version 9.3.20.v20170531 Highest
Related Dependencies websocket-client-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/websocket/websocket-client/9.3.20.v20170531/websocket-client-9.3.20.v20170531.jar MD5: c6d47810c8af9f3a54da1cc70cceabf4 SHA1: 6c9593d964eee588c3ecc4c7259873cc9f9be0fc SHA256: b2ffa5a2f4440c8c266b643aeea37571d7c9062f9bdb6d3fd7e4d91277b7522d pkg:maven/org.eclipse.jetty.websocket/websocket-client@9.3.20.v20170531 websocket-common-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/websocket/websocket-common/9.3.20.v20170531/websocket-common-9.3.20.v20170531.jar MD5: ffadb7dad9d4c2a7518628a6be929ab7 SHA1: c6e21ead086899894d17789b111162fe682c1741 SHA256: c6d42bbd4e78d03017b4b9cc50a63b87ea1ea705404e3e441643c97ade173f2e pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.3.20.v20170531 websocket-servlet-9.3.20.v20170531.jarFile Path: /home/runner/.m2/repository/org/eclipse/jetty/websocket/websocket-servlet/9.3.20.v20170531/websocket-servlet-9.3.20.v20170531.jar MD5: a8b3bf064bdec7be1080bd96369dc4ec SHA1: 57893242e63bffc425200e74651a913ac6d0ec58 SHA256: c07acd6c1d6bc28d7d84bee09e7b8349cd088572499c283d9233fc652588f311 pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@9.3.20.v20170531 CVE-2017-7657 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), CWE-190 Integer Overflow or Wraparound
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7658 suppress
In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths headers, Jetty ignored the second. When presented with a content-length and a chunked encoding header, the content-length was ignored (as per RFC 2616). If an intermediary decided on the shorter length, but still passed on the longer body, then body content could be interpreted by Jetty as a pipelined request. If the intermediary was imposing authorization, the fake pipelined request would bypass that authorization. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')
CVSSv2:
Base Score: HIGH (7.5) Vector: /AV:N/AC:L/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: CRITICAL (9.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2017-7656 suppress
In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), HTTP/0.9 is handled poorly. An HTTP/1 style request line (i.e. method space URI space version) that declares a version of HTTP/0.9 was accepted and treated as a 0.9 request. If deployed behind an intermediary that also accepted and passed through the 0.9 version (but did not act on it), then the response sent could be interpreted by the intermediary as HTTP/1 headers. This could be used to poison the cache if the server allowed the origin client to generate arbitrary content in the response. CWE-444 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12545 suppress
In Eclipse Jetty version 9.3.x and 9.4.x, the server is vulnerable to Denial of Service conditions if a remote client sends either large SETTINGs frames container containing many settings, or many small SETTINGs frames. The vulnerability is due to the additional CPU and memory allocations required to handle changed settings. CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28165 suppress
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame. CWE-400 Uncontrolled Resource Consumption, CWE-755 Improper Handling of Exceptional Conditions, CWE-551 Incorrect Behavior Order: Authorization Before Parsing and Canonicalization
CVSSv2:
Base Score: HIGH (7.8) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:C CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2048 suppress
In Eclipse Jetty HTTP/2 server implementation, when encountering an invalid HTTP/2 request, the error handling has a bug that can wind up not properly cleaning up the active connections and associated resources. This can lead to a Denial of Service scenario where there are no enough resources left to process good requests. CWE-664 Improper Control of a Resource Through its Lifetime, NVD-CWE-Other, CWE-410 Insufficient Resource Pool
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:N/I:N/A:P CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36478 suppress
Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer overflow in `MetaDataBuilder.checkSize` allows for HTTP/2 HPACK header values to
exceed their size limit. `MetaDataBuilder.java` determines if a header name or value exceeds the size limit, and throws an exception if the limit is exceeded. However, when length is very large and huffman is true, the multiplication by 4 in line 295
will overflow, and length will become negative. `(_size+length)` will now be negative, and the check on line 296 will not be triggered. Furthermore, `MetaDataBuilder.checkSize` allows for user-entered HPACK header value sizes to be negative, potentially leading to a very large buffer allocation later on when the user-entered size is multiplied by 2. This means that if a user provides a negative length value (or, more precisely, a length value which, when multiplied by the 4/3 fudge factor, is negative), and this length value is a very large positive number when multiplied by 2, then the user can cause a very large buffer to be allocated on the server. Users of HTTP/2 can be impacted by a remote denial of service attack. The issue has been fixed in versions 11.0.16, 10.0.16, and 9.4.53. There are no known workarounds. CWE-400 Uncontrolled Resource Consumption, CWE-190 Integer Overflow or Wraparound
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-44487 suppress
CISA Known Exploited Vulnerability: Product: IETF HTTP/2 Name: HTTP/2 Rapid Reset Attack Vulnerability Date Added: 2023-10-10 Description: HTTP/2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS). Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. Due Date: 2023-10-31 Notes: This vulnerability affects a common open-source component, third-party library, or a protocol used by different products. Please check with specific vendors for information on patching status. For more information, please see: https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. CWE-400 Uncontrolled Resource Consumption
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
cve@mitre.org - EXPLOIT,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PATCH,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,PRESS/MEDIA_COVERAGE cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,THIRD_PARTY_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - ISSUE_TRACKING,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST cve@mitre.org - MAILING_LIST,PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,PATCH,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,THIRD_PARTY_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MAILING_LIST,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,PATCH,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - MITIGATION,VENDOR_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,THIRD_PARTY_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PATCH,VENDOR_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRESS/MEDIA_COVERAGE,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,THIRD_PARTY_ADVISORY cve@mitre.org - PRODUCT,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,THIRD_PARTY_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - RELEASE_NOTES,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,THIRD_PARTY_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - TECHNICAL_DESCRIPTION,VENDOR_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY cve@mitre.org - THIRD_PARTY_ADVISORY,US_GOVERNMENT_RESOURCE cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY cve@mitre.org - VENDOR_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2020-27216 suppress
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability. CWE-378 Creation of Temporary File With Insecure Permissions, CWE-379 Creation of Temporary File in Directory with Insecure Permissions, NVD-CWE-Other
CVSSv2:
Base Score: MEDIUM (4.4) Vector: /AV:L/AC:M/Au:N/C:P/I:P/A:P CVSSv3:
Base Score: HIGH (7.0) Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:1.0/RC:R/MAV:A References:
emo@eclipse.org - EXPLOIT,MITIGATION,THIRD_PARTY_ADVISORY emo@eclipse.org - EXPLOIT,PATCH,VENDOR_ADVISORY emo@eclipse.org - MAILING_LIST,THIRD_PARTY_ADVISORY emo@eclipse.org - NOT_APPLICABLE,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - PATCH,THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY emo@eclipse.org - THIRD_PARTY_ADVISORY Vulnerable Software & Versions: (show all )
CVE-2019-10241 suppress
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL against the DefaultServlet or ResourceHandler that is configured for showing a Listing of directory contents. CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVSSv2:
Base Score: MEDIUM (4.3) Vector: /AV:N/AC:M/Au:N/C:N/I:P/A:N CVSSv3:
Base Score: MEDIUM (6.1) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2018-12536 suppress
In Eclipse Jetty Server, all 9.x versions, on webapps deployed using default Error Handling, when an intentionally bad query arrives that doesn't match a dynamic url-pattern, and is eventually handled by the DefaultServlet's static file serving, the bad characters can trigger a java.nio.file.InvalidPathException which includes the full path to the base resource directory that the DefaultServlet and/or webapp is using. If this InvalidPathException is then handled by the default Error Handler, the InvalidPathException message is included in the error response, revealing the full server path to the requesting system. CWE-209 Generation of Error Message Containing Sensitive Information, NVD-CWE-noinfo
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2019-10247 suppress
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Context that matches the requested path. The default server behavior on jetty-distribution and jetty-home will include at the end of the Handler tree a DefaultHandler, which is responsible for reporting this 404 error, it presents the various configured contexts as HTML for users to click through to. This produced HTML includes output that contains the configured fully qualified directory base resource location for each context. CWE-213 Exposure of Sensitive Information Due to Incompatible Policies, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-28169 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application. NVD-CWE-Other, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv2:
Base Score: MEDIUM (5.0) Vector: /AV:N/AC:L/Au:N/C:P/I:N/A:N CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26048 suppress
Jetty is a java based web server and servlet engine. In affected versions servlets with multipart support (e.g. annotated with `@MultipartConfig`) that call `HttpServletRequest.getParameter()` or `HttpServletRequest.getParts()` may cause `OutOfMemoryError` when the client sends a multipart request with a part that has a name but no filename and very large content. This happens even with the default settings of `fileSizeThreshold=0` which should stream the whole part content to disk. An attacker client may send a large multipart request and cause the server to throw `OutOfMemoryError`. However, the server may be able to recover after the `OutOfMemoryError` and continue its service -- although it may take some time. This issue has been patched in versions 9.4.51, 10.0.14, and 11.0.14. Users are advised to upgrade. Users unable to upgrade may set the multipart parameter `maxRequestSize` which must be set to a non-negative value, so the whole multipart content is limited (although still read into memory). CWE-400 Uncontrolled Resource Consumption, CWE-770 Allocation of Resources Without Limits or Throttling
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-26049 suppress
Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or otherwise perform unintended behavior by tampering with the cookie parsing mechanism. If Jetty sees a cookie VALUE that starts with `"` (double quote), it will continue to read the cookie string until it sees a closing quote -- even if a semicolon is encountered. So, a cookie header such as: `DISPLAY_LANGUAGE="b; JSESSIONID=1337; c=d"` will be parsed as one cookie, with the name DISPLAY_LANGUAGE and a value of b; JSESSIONID=1337; c=d instead of 3 separate cookies. This has security implications because if, say, JSESSIONID is an HttpOnly cookie, and the DISPLAY_LANGUAGE cookie value is rendered on the page, an attacker can smuggle the JSESSIONID cookie into the DISPLAY_LANGUAGE cookie and thereby exfiltrate it. This is significant when an intermediary is enacting some policy based on cookies, so a smuggled cookie can bypass that policy yet still be seen by the Jetty server or its logging system. This issue has been addressed in versions 9.4.51, 10.0.14, 11.0.14, and 12.0.0.beta0 and users are advised to upgrade. There are no known workarounds for this issue. NVD-CWE-noinfo, CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-40167 suppress
Jetty is a Java based web server and servlet engine. Prior to versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1, Jetty accepts the `+` character proceeding the content-length value in a HTTP/1 header field. This is more permissive than allowed by the RFC and other servers routinely reject such requests with 400 responses. There is no known exploit scenario, but it is conceivable that request smuggling could result if jetty is used in combination with a server that does not close the connection after sending such a 400 response. Versions 9.4.52, 10.0.16, 11.0.16, and 12.0.1 contain a patch for this issue. There is no workaround as there is no known exploit scenario. CWE-130 Improper Handling of Length Parameter Inconsistency, NVD-CWE-noinfo
CVSSv3:
Base Score: MEDIUM (5.3) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2023-36479 suppress
Eclipse Jetty Canonical Repository is the canonical repository for the Jetty project. Users of the CgiServlet with a very specific command structure may have the wrong command executed. If a user sends a request to a org.eclipse.jetty.servlets.CGI Servlet for a binary with a space in its name, the servlet will escape the command by wrapping it in quotation marks. This wrapped command, plus an optional command prefix, will then be executed through a call to Runtime.exec. If the original binary name provided by the user contains a quotation mark followed by a space, the resulting command line will contain multiple tokens instead of one. This issue was patched in version 9.4.52, 10.0.16, 11.0.16 and 12.0.0-beta2.
CWE-149 Improper Neutralization of Quoting Syntax
CVSSv3:
Base Score: MEDIUM (4.3) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:2.8/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2021-34428 suppress
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in. CWE-613 Insufficient Session Expiration
CVSSv2:
Base Score: LOW (3.6) Vector: /AV:L/AC:L/Au:N/C:P/I:P/A:N CVSSv3:
Base Score: LOW (3.5) Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:0.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
CVE-2022-2047 suppress
In Eclipse Jetty versions 9.4.0 thru 9.4.46, and 10.0.0 thru 10.0.9, and 11.0.0 thru 11.0.9 versions, the parsing of the authority segment of an http scheme URI, the Jetty HttpURI class improperly detects an invalid input as a hostname. This can lead to failures in a Proxy scenario. CWE-20 Improper Input Validation
CVSSv2:
Base Score: MEDIUM (4.0) Vector: /AV:N/AC:L/Au:S/C:N/I:P/A:N CVSSv3:
Base Score: LOW (2.7) Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N/E:1.2/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Woodstox is a high-performance XML processor that
implements Stax (JSR-173), SAX2 and Stax2 APIs
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/fasterxml/woodstox/woodstox-core/5.0.3/woodstox-core-5.0.3.jar
MD5: 8b151bd3d262d9c07e0384b7cc6c4cd9
SHA1: 10aa199207fda142eff01cd61c69244877d71770
SHA256: a1c04b64fbfe20ae9f2c60a3bf1633fed6688ae31935b6bd4a457a1bbb2e82d4
Referenced In Project/Scope: shardingsphere-infra-database-hive:provided
woodstox-core-5.0.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.hive/hive-jdbc@3.1.3
Evidence Type Source Name Value Confidence Vendor file name woodstox-core High Vendor jar package name stax Highest Vendor Manifest bundle-docurl https://github.com/FasterXML/woodstox Low Vendor Manifest bundle-symbolicname com.fasterxml.woodstox.woodstox-core Medium Vendor Manifest implementation-build-date 2016-08-24 03:58:19+0000 Low Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.woodstox Medium Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid woodstox-core Highest Vendor pom artifactid woodstox-core Low Vendor pom developer email tatu@fasterxml.com Low Vendor pom developer id cowtowncoder Medium Vendor pom developer name Tatu Saloranta Medium Vendor pom groupid com.fasterxml.woodstox Highest Vendor pom name Woodstox High Vendor pom organization name FasterXML High Vendor pom organization url http://fasterxml.com Medium Vendor pom parent-artifactid oss-parent Low Vendor pom parent-groupid com.fasterxml Medium Vendor pom url FasterXML/woodstox Highest Product file name woodstox-core High Product jar package name stax Highest Product Manifest bundle-docurl https://github.com/FasterXML/woodstox Low Product Manifest Bundle-Name Woodstox Medium Product Manifest bundle-symbolicname com.fasterxml.woodstox.woodstox-core Medium Product Manifest implementation-build-date 2016-08-24 03:58:19+0000 Low Product Manifest Implementation-Title Woodstox High Product Manifest specification-title Woodstox Medium Product pom artifactid woodstox-core Highest Product pom developer email tatu@fasterxml.com Low Product pom developer id cowtowncoder Low Product pom developer name Tatu Saloranta Low Product pom groupid com.fasterxml.woodstox Highest Product pom name Woodstox High Product pom organization name FasterXML Low Product pom organization url http://fasterxml.com Low Product pom parent-artifactid oss-parent Medium Product pom parent-groupid com.fasterxml Medium Product pom url FasterXML/woodstox High Version file version 5.0.3 High Version Manifest Bundle-Version 5.0.3 High Version Manifest Implementation-Version 5.0.3 High Version pom parent-version 5.0.3 Low Version pom version 5.0.3 Highest
CVE-2022-40152 suppress
Those using Woodstox to parse XML data may be vulnerable to Denial of Service attacks (DOS) if DTD support is enabled. If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack. CWE-787 Out-of-bounds Write, CWE-121 Stack-based Buffer Overflow
CVSSv3:
Base Score: HIGH (7.5) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:3.9/RC:R/MAV:A References:
Vulnerable Software & Versions: (show all )
Description:
Unknown version of isorelax library used in JAXB project File Path: /home/runner/.m2/repository/com/fasterxml/woodstox/woodstox-core/6.5.1/woodstox-core-6.5.1.jar/META-INF/maven/com.sun.xml.bind.jaxb/isorelax/pom.xmlMD5: 6fbb4bc95fbf2072bc6e3b790553fe81SHA1: 314ec72948d5c1fc71d553cbbd7a130caa6f9f13SHA256: cda6451d0231a973352b592ff950e39224ba6ba1a2f35eeab66511b5c225dff1Referenced In Projects/Scopes:
shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-jdbc-distribution:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-jdbc:compile shardingsphere-standalone-mode-repository-jdbc:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile Evidence Type Source Name Value Confidence Vendor pom artifactid isorelax Low Vendor pom groupid com.sun.xml.bind.jaxb Highest Vendor pom name JAXB isorelax library High Vendor pom parent-artifactid jvnet-parent Low Vendor pom parent-groupid net.java Medium Product pom artifactid isorelax Highest Product pom groupid com.sun.xml.bind.jaxb Highest Product pom name JAXB isorelax library High Product pom parent-artifactid jvnet-parent Medium Product pom parent-groupid net.java Medium Version pom parent-version 20090621 Low Version pom version 20090621 Highest
Description:
XML Schema datatypes library File Path: /home/runner/.m2/repository/com/fasterxml/woodstox/woodstox-core/6.5.1/woodstox-core-6.5.1.jar/META-INF/maven/net.java.dev.msv/xsdlib/pom.xmlMD5: aaf872ed9d1aabee25e03c2a132ffd8eSHA1: 47f218a999411ed028f089d59ebef8f14e0fe914SHA256: d6e83c124436049d83238fc532a26c5d8ccd7e4ab10eba6d96043c850ac82f3cReferenced In Projects/Scopes:
shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-jdbc-distribution:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-jdbc:compile shardingsphere-standalone-mode-repository-jdbc:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile Evidence Type Source Name Value Confidence Vendor pom artifactid xsdlib Low Vendor pom groupid net.java.dev.msv Highest Vendor pom name MSV XML Schema Library High Vendor pom parent-artifactid msv Low Product pom artifactid xsdlib Highest Product pom groupid net.java.dev.msv Highest Product pom name MSV XML Schema Library High Product pom parent-artifactid msv Medium Version pom version 2013.6.1 Highest
Description:
Woodstox is a high-performance XML processor that implements Stax (JSR-173),
SAX2 and Stax2 APIs
License:
The Apache License, Version 2.0: http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/com/fasterxml/woodstox/woodstox-core/6.5.1/woodstox-core-6.5.1.jar
MD5: 961dd4b2afedf95293dfdd8adfc8f211
SHA1: c6e52e84fe959e69a243c83ec7d24cd889444ddf
SHA256: c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f
Referenced In Projects/Scopes: shardingsphere-agent-metrics-core:provided shardingsphere-proxy-native-distribution:compile shardingsphere-agent-tracing-core:provided shardingsphere-test-e2e-sql:compile shardingsphere-agent-logging-file:provided shardingsphere-test-e2e-agent-engine:compile shardingsphere-test-e2e-fixture:compile shardingsphere-agent-plugin-core:provided shardingsphere-test-e2e-agent-plugins-zipkin:compile shardingsphere-test-e2e-driver:compile shardingsphere-agent-plugin-logging:provided shardingsphere-test-e2e-showprocesslist:compile shardingsphere-proxy-distribution:compile shardingsphere-test-e2e-transaction:compile shardingsphere-agent-metrics-type:provided shardingsphere-agent-tracing-opentelemetry:provided shardingsphere-data-pipeline-opengauss:compile shardingsphere-data-pipeline-core:compile shardingsphere-test-e2e-agent-plugins-logging-file:compile shardingsphere-jdbc-distribution:compile shardingsphere-agent-tracing-type:provided shardingsphere-proxy-frontend-spi:compile shardingsphere-agent-plugins:provided shardingsphere-agent-plugin-tracing:provided shardingsphere-test-e2e-pipeline:compile shardingsphere-proxy-backend-opengauss:compile shardingsphere-data-pipeline-scenario-consistencycheck:compile shardingsphere-test-e2e-agent-plugins-metrics-prometheus:compile shardingsphere-test-e2e-agent-plugins-jaeger:compile shardingsphere-proxy-backend-postgresql:compile shardingsphere-agent-logging-type:provided shardingsphere-data-pipeline-cdc-core:compile shardingsphere-data-pipeline-postgresql:compile shardingsphere-test-e2e-env:compile shardingsphere-proxy-frontend-opengauss:compile shardingsphere-proxy-backend-core:compile shardingsphere-test-it-pipeline:compile shardingsphere-jdbc:compile shardingsphere-standalone-mode-repository-jdbc:compile shardingsphere-test-e2e-agent-jdbc-fixture:compile shardingsphere-proxy-frontend-postgresql:compile shardingsphere-test-e2e-agent-proxy-fixture:compile shardingsphere-agent-metrics-prometheus:provided shardingsphere-proxy-frontend-mysql:compile shardingsphere-proxy-frontend-core:compile shardingsphere-proxy-bootstrap:compile shardingsphere-data-pipeline-distsql-handler:compile shardingsphere-agent-plugin-metrics:provided shardingsphere-data-pipeline-scenario-migration:compile shardingsphere-proxy-backend-mysql:compile woodstox-core-6.5.1.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-mysql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-env@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-frontend-postgresql@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-data-pipeline-scenario-consistencycheck@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-fixture@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-test-e2e-agent-engine@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-standalone-mode-repository-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-backend-core@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/com.fasterxml.jackson.dataformat/jackson-dataformat-xml@2.16.1 pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-proxy-bootstrap@5.5.1-SNAPSHOT pkg:maven/org.apache.shardingsphere/shardingsphere-jdbc@5.5.1-SNAPSHOT Evidence Type Source Name Value Confidence Vendor file name woodstox-core High Vendor jar package name stax Highest Vendor Manifest build-jdk-spec 1.8 Low Vendor Manifest bundle-docurl https://github.com/FasterXML/woodstox Low Vendor Manifest bundle-symbolicname com.fasterxml.woodstox.woodstox-core Medium Vendor Manifest Implementation-Vendor FasterXML High Vendor Manifest Implementation-Vendor-Id com.fasterxml.woodstox Medium Vendor Manifest provide-capability osgi.service;objectClass:List="javax.xml.stream.XMLEventFactory";effective:=active,osgi.service;objectClass:List="javax.xml.stream.XMLInputFactory";effective:=active,osgi.service;objectClass:List="javax.xml.stream.XMLOutputFactory";effective:=active,osgi.service;objectClass:List="org.codehaus.stax2.validation.XMLValidationSchemaFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.xml.stream.XMLEventFactory";register:="com.ctc.wstx.stax.WstxEventFactory",osgi.serviceloader;osgi.serviceloader="javax.xml.stream.XMLInputFactory";register:="com.ctc.wstx.stax.WstxInputFactory",osgi.serviceloader;osgi.serviceloader="javax.xml.stream.XMLOutputFactory";register:="com.ctc.wstx.stax.WstxOutputFactory",osgi.serviceloader;osgi.serviceloader="org.codehaus.stax2.validation.XMLValidationSchemaFactory";register:="com.ctc.wstx.dtd.DTDSchemaFactory",osgi.serviceloader;osgi.serviceloader="org.codehaus.stax2.validation.XMLValidationSchemaFactory";register:="com.ctc.wstx.msv.RelaxNGSchemaFactory",osgi.serviceloader;osgi.serviceloader="org.codehaus.stax2.validation.XMLValidationSchemaFactory";register:="com.ctc.wstx.msv.W3CSchemaFactory" Low Vendor Manifest specification-vendor FasterXML Low Vendor pom artifactid woodstox-core Highest Vendor pom artifactid woodstox-core Low Vendor pom developer email tatu@fasterxml.com Low Vendor pom developer id cowtowncoder Medium Vendor pom developer name Tatu Saloranta Medium Vendor pom groupid com.fasterxml.woodstox Highest Vendor pom name Woodstox High Vendor pom organization name FasterXML High Vendor pom organization url http://fasterxml.com Medium Vendor pom parent-artifactid oss-parent Low Vendor pom parent-groupid com.fasterxml Medium Vendor pom url FasterXML/woodstox Highest Product file name woodstox-core High Product jar package name dtd Highest Product jar package name dtdschemafactory Highest Product jar package name msv Highest Product jar package name osgi Highest Product jar package name relaxngschemafactory Highest Product jar package name stax Highest Product jar package name w3cschemafactory Highest Product jar package name wstx Highest Product jar package name wstxeventfactory Highest Product jar package name wstxinputfactory Highest Product jar package name wstxoutputfactory Highest Product Manifest build-jdk-spec 1.8 Low Product Manifest bundle-docurl https://github.com/FasterXML/woodstox Low Product Manifest Bundle-Name Woodstox Medium Product Manifest bundle-symbolicname com.fasterxml.woodstox.woodstox-core Medium Product Manifest Implementation-Title Woodstox High Product Manifest provide-capability osgi.service;objectClass:List="javax.xml.stream.XMLEventFactory";effective:=active,osgi.service;objectClass:List="javax.xml.stream.XMLInputFactory";effective:=active,osgi.service;objectClass:List="javax.xml.stream.XMLOutputFactory";effective:=active,osgi.service;objectClass:List="org.codehaus.stax2.validation.XMLValidationSchemaFactory";effective:=active,osgi.serviceloader;osgi.serviceloader="javax.xml.stream.XMLEventFactory";register:="com.ctc.wstx.stax.WstxEventFactory",osgi.serviceloader;osgi.serviceloader="javax.xml.stream.XMLInputFactory";register:="com.ctc.wstx.stax.WstxInputFactory",osgi.serviceloader;osgi.serviceloader="javax.xml.stream.XMLOutputFactory";register:="com.ctc.wstx.stax.WstxOutputFactory",osgi.serviceloader;osgi.serviceloader="org.codehaus.stax2.validation.XMLValidationSchemaFactory";register:="com.ctc.wstx.dtd.DTDSchemaFactory",osgi.serviceloader;osgi.serviceloader="org.codehaus.stax2.validation.XMLValidationSchemaFactory";register:="com.ctc.wstx.msv.RelaxNGSchemaFactory",osgi.serviceloader;osgi.serviceloader="org.codehaus.stax2.validation.XMLValidationSchemaFactory";register:="com.ctc.wstx.msv.W3CSchemaFactory" Low Product Manifest specification-title Woodstox Medium Product pom artifactid woodstox-core Highest Product pom developer email tatu@fasterxml.com Low Product pom developer id cowtowncoder Low Product pom developer name Tatu Saloranta Low Product pom groupid com.fasterxml.woodstox Highest Product pom name Woodstox High Product pom organization name FasterXML Low Product pom organization url http://fasterxml.com Low Product pom parent-artifactid oss-parent Medium Product pom parent-groupid com.fasterxml Medium Product pom url FasterXML/woodstox High Version file version 6.5.1 High Version Manifest Bundle-Version 6.5.1 High Version Manifest Implementation-Version 6.5.1 High Version pom parent-version 6.5.1 Low Version pom version 6.5.1 Highest
Description:
Zipkin (Parent) License:
http://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/zipkin/zipkin2/zipkin/2.23.2/zipkin-2.23.2.jar
MD5: ce30ac8103a89b0c8713aeaa621c2d5b
SHA1: 001c2c7f2e91a3749311f7f75d0535d14ba2e2f6
SHA256: 80358417cdf6499d84d31ad34433f46753384f183d8e2107409d7f20e9f40226
Referenced In Projects/Scopes: shardingsphere-agent-tracing-opentelemetry:compile shardingsphere-agent-distribution:compile zipkin-2.23.2.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/io.opentelemetry/opentelemetry-exporter-zipkin@1.31.0 Evidence Type Source Name Value Confidence Vendor file name zipkin High Vendor jar package name zipkin2 Highest Vendor Manifest automatic-module-name zipkin2 Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl http://zipkin.io/ Low Vendor Manifest bundle-symbolicname io.zipkin.zipkin2.zipkin Medium Vendor pom artifactid zipkin Highest Vendor pom artifactid zipkin Low Vendor pom groupid io.zipkin.zipkin2 Highest Vendor pom name Zipkin Core Library High Vendor pom parent-artifactid zipkin-parent Low Vendor pom parent-groupid io.zipkin Medium Product file name zipkin High Product jar package name zipkin2 Highest Product Manifest automatic-module-name zipkin2 Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl http://zipkin.io/ Low Product Manifest Bundle-Name Zipkin Core Library Medium Product Manifest bundle-symbolicname io.zipkin.zipkin2.zipkin Medium Product pom artifactid zipkin Highest Product pom groupid io.zipkin.zipkin2 Highest Product pom name Zipkin Core Library High Product pom parent-artifactid zipkin-parent Medium Product pom parent-groupid io.zipkin Medium Version file version 2.23.2 High Version Manifest Bundle-Version 2.23.2 High Version pom version 2.23.2 Highest
Description:
Zipkin Reporter (Parent) License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/zipkin/reporter2/zipkin-reporter/2.16.3/zipkin-reporter-2.16.3.jar
MD5: 656ce86131f12e1e9f5c0d8c1b826ce9
SHA1: 07e43d8be3376d305c355d969e8b9f3a62221380
SHA256: e5ef2a42b910d24d554e267880828fb2e149b2ffcf6a611655fd319eea4445e7
Referenced In Projects/Scopes: shardingsphere-agent-tracing-opentelemetry:compile shardingsphere-agent-distribution:compile zipkin-reporter-2.16.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/io.opentelemetry/opentelemetry-exporter-zipkin@1.31.0 Evidence Type Source Name Value Confidence Vendor file name zipkin-reporter High Vendor jar package name reporter Highest Vendor jar package name zipkin2 Highest Vendor Manifest automatic-module-name zipkin2.reporter Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://zipkin.io/ Low Vendor Manifest bundle-symbolicname io.zipkin.reporter2.zipkin-reporter Medium Vendor pom artifactid zipkin-reporter Highest Vendor pom artifactid zipkin-reporter Low Vendor pom groupid io.zipkin.reporter2 Highest Vendor pom name Zipkin Reporter: Core High Vendor pom parent-artifactid zipkin-reporter-parent Low Product file name zipkin-reporter High Product jar package name reporter Highest Product jar package name zipkin2 Highest Product Manifest automatic-module-name zipkin2.reporter Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://zipkin.io/ Low Product Manifest Bundle-Name Zipkin Reporter: Core Medium Product Manifest bundle-symbolicname io.zipkin.reporter2.zipkin-reporter Medium Product pom artifactid zipkin-reporter Highest Product pom groupid io.zipkin.reporter2 Highest Product pom name Zipkin Reporter: Core High Product pom parent-artifactid zipkin-reporter-parent Medium Version file version 2.16.3 High Version Manifest Bundle-Version 2.16.3 High Version pom version 2.16.3 Highest
Description:
Zipkin Reporter (Parent) License:
https://www.apache.org/licenses/LICENSE-2.0.txt File Path: /home/runner/.m2/repository/io/zipkin/reporter2/zipkin-sender-okhttp3/2.16.3/zipkin-sender-okhttp3-2.16.3.jar
MD5: 8847e7ed4a5007afd1fd6742e806d8ce
SHA1: c98cff5bc2fa32914e613efc3cc95dde9906c01b
SHA256: 3f46afa5a25f52c15b3994612d0d91010176171d9f7c8e690579543928cbb1a8
Referenced In Projects/Scopes: shardingsphere-agent-distribution:runtime shardingsphere-agent-tracing-opentelemetry:runtime zipkin-sender-okhttp3-2.16.3.jar is in the transitive dependency tree of the listed items. Included by: pkg:maven/org.apache.shardingsphere/shardingsphere-agent-tracing-opentelemetry@5.5.1-SNAPSHOT pkg:maven/io.opentelemetry/opentelemetry-exporter-zipkin@1.31.0 Evidence Type Source Name Value Confidence Vendor file name zipkin-sender-okhttp3 High Vendor jar package name okhttp3 Highest Vendor jar package name reporter Highest Vendor jar package name zipkin2 Highest Vendor Manifest automatic-module-name zipkin2.reporter.okhttp3 Medium Vendor Manifest build-jdk-spec 11 Low Vendor Manifest bundle-docurl https://zipkin.io/ Low Vendor Manifest bundle-symbolicname io.zipkin.reporter2.zipkin-sender-okhttp3 Medium Vendor pom artifactid zipkin-sender-okhttp3 Highest Vendor pom artifactid zipkin-sender-okhttp3 Low Vendor pom groupid io.zipkin.reporter2 Highest Vendor pom name Zipkin Sender: OkHttp 3 High Vendor pom parent-artifactid zipkin-reporter-parent Low Product file name zipkin-sender-okhttp3 High Product jar package name okhttp3 Highest Product jar package name reporter Highest Product jar package name zipkin2 Highest Product Manifest automatic-module-name zipkin2.reporter.okhttp3 Medium Product Manifest build-jdk-spec 11 Low Product Manifest bundle-docurl https://zipkin.io/ Low Product Manifest Bundle-Name Zipkin Sender: OkHttp 3 Medium Product Manifest bundle-symbolicname io.zipkin.reporter2.zipkin-sender-okhttp3 Medium Product pom artifactid zipkin-sender-okhttp3 Highest Product pom groupid io.zipkin.reporter2 Highest Product pom name Zipkin Sender: OkHttp 3 High Product pom parent-artifactid zipkin-reporter-parent Medium Version file version 2.16.3 High Version Manifest Bundle-Version 2.16.3 High Version pom version 2.16.3 Highest